Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Optimizing PWAs For Different Display Modes

      August 26, 2025

      Node.js Web App Development Costs: A 2025 Executive Pricing Guide

      August 26, 2025

      Google locking down Android security with upcoming developer verification requirements for sideloaded apps

      August 26, 2025

      Microsoft donates DocumentDB to the Linux Foundation

      August 25, 2025

      Rediscovering joy in learning: Jason Lengstorf on the state of development

      August 26, 2025

      Representative Line: Not What They Meant By Watching “AndOr”

      August 26, 2025

      ChatGPT is reportedly scraping Google Search data to answer your questions – here’s how

      August 26, 2025

      The 10 best early Labor Day deals live now: Save on Apple, Samsung and more

      August 26, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Log Outgoing HTTP Requests with the Laravel Spy Package

      August 26, 2025
      Recent

      Log Outgoing HTTP Requests with the Laravel Spy Package

      August 26, 2025

      devdojo/auth

      August 26, 2025

      Rust Slices: Cutting Into References the Safe Way

      August 26, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      GitHub Copilot for Azure Debuts in Visual Studio 2022

      August 26, 2025
      Recent

      GitHub Copilot for Azure Debuts in Visual Studio 2022

      August 26, 2025

      How to Enable HDR in Stalker 2 Step by Step

      August 26, 2025

      Microsoft’s Latest Edge Survey Hints at Upcoming Copilot Mode Upgrades

      August 26, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-3946 – Honeywell Experion PKS and OneWireless WDM Remote Code Execution via Input Data Manipulation

    CVE-2025-3946 – Honeywell Experion PKS and OneWireless WDM Remote Code Execution via Input Data Manipulation

    July 10, 2025

    CVE ID : CVE-2025-3946

    Published : July 10, 2025, 9:15 p.m. | 59 minutes ago

    Description : The Honeywell Experion PKS

    and OneWireless WDM

    contains a Deployment of Wrong Handler

    vulnerability

    in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to

    Input Data Manipulation,

    which could result in incorrect handling of packets leading to remote code execution.

    Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.

    The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.

    Severity: 8.2 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-4662 – Brocade SANnav Plaintext Passphrase Disclosure
    Next Article CVE-2025-3947 – Honeywell Experion PKS Control Data Access Integer Underflow Denial of Service

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-55575 – SMM Panel SQL Injection

    August 26, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-9443 – Tenda CH22 Buffer Overflow Vulnerability

    August 26, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Snyk announces new DAST solution for securing APIs and web apps

    Tech & Work

    CVE-2025-3986 – Apache Apereo CAS Regular Expression Inefficient Complexity Remote Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-5129 – Sangfor aTrust Directory Traversal Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-54221 – Adobe InCopy Out-of-Bounds Write Arbitrary Code Execution Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    Google AI Releases LangExtract: An Open Source Python Library that Extracts Structured Data from Unstructured Text Documents

    August 6, 2025

    In today’s data-driven world, valuable insights are often buried in unstructured text—be it clinical notes,…

    How to Restore Missing or Disappeared Channels in Microsoft Teams

    August 25, 2025

    Sam Altman’s future ChatGPT sounds like Microsoft’s Windows Recall but with Copilot’s companionship traits — “running all the time, looking at all your stuff”

    July 3, 2025

    CVE-2025-4875 – Campcodes Online Shopping Portal SQL Injection Vulnerability

    May 18, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.