CVE-2023-25178

9.8 criticalEPSS 0.5%

Critical (9.8) in honeywell c300 firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-345
Published: 2023-07-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

honeywell:c300_firmware

References

https://process.honeywell.com
https://process.honeywell.com

Check your stack JSON