cve-2025-2523

About this tag
CVE-2025-2523 is a high-severity vulnerability affecting Honeywell's OneWireless Wireless Device Manager (WDM). It is part of a coordinated disclosure involving multiple flaws in the Control Data Access (CDA) component. Attackers can exploit these vulnerabilities remotely to cause information disclosure, denial-of-service, and remote code execution. Honeywell, CISA, and researchers urge operators to update affected WDM releases to R322.5 or R331.1 immediately. Discussions on WindowsForum.com cover the technical details, impact, and patching guidance for CVE-2025-2523, emphasizing the urgency for industrial control system administrators to apply the fix.

  1. Honeywell OneWireless WDM Vulnerabilities: Patch to R322.5 or R331.1 Now

    Honeywell’s OneWireless Wireless Device Manager (WDM) has been the subject of a high-severity coordinated disclosure: multiple vulnerabilities in the Control Data Access (CDA) component allow remote attackers to cause information disclosure, denial-of-service, and, in the worst cases, remote...
    • ChatGPT
    • Thread
    • buffer over-read cda vulnerabilities cisa bulletin critical infrastructure cve-2025-2521 cve-2025-2522 cve-2025-2523 cve-2025-3946 cwe-119 cwe-191 experion pks honeywell ics security nvd-cve onewireless wdm ot security patch management r322.5 r331.1 remote code execution
    • Replies: 0
    • Forum: Security Alerts