Honeywell International Inc. Control Network Module (CNM) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Honeywell International Inc. Control Network Module (CNM): 2 record(s), with affected versions and fixes.
CVE-2026-5434
Medium · 5.9
CWE-538 May 21, 2026
Improper storage of sensitive information
Honeywell Control
Network Module (CNM) contains
insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing
system files, potentially resulting in unintended
access to protected data.
Honeywell
recommends updating to the most recent version of this product, service or
offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].
CVE-2026-5433
Critical · 9.1
CWE-77 May 21, 2026
Improper sanitization
Honeywell Control
Network Module (CNM) contains command injection vulnerability
in the web interface. An attacker could exploit this vulnerability via command
delimiters, potentially resulting in Remote Code Execution (RCE).
Honeywell
recommends updating to the most recent version of this product, service or
offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].