Riskcovery

CVE-2025-2522

Lack of buffer clearing before reuse may result in incorrect system behavior.

State
Published
Severity
6.5 Medium
Published
Jul 10, 2025
Updated
Aug 4, 2025
Reserved
Mar 19, 2025

Read the record on cve.org

Description

The Honeywell Experion PKS and OneWireless WDM

contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may cause incorrect system behavior.

Honeywell also recommends updating to the most recent version of

Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.

The affected Experion PKS products are

C300, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are 520.1 before

520.2 TCU9 HF1 and 530 before 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NHoneywell

Weaknesses

  • CWE-226 Sensitive Information in Resource Not Removed Before Reuse

Affected Products

ProductVersions
C300 PCNT02Honeywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
C300 PCNT05Honeywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
FIM4Honeywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
FIM8Honeywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
UOCHoneywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
CN100Honeywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
HCAHoneywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
C300PMHoneywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
C200EHoneywell
  • 520.1 through 520.2 TCU9Affected
  • 530 through 530 TCU3Affected
Wireless Device ManagerHoneywell
  • 322.1 through 322.4Affected
  • 330.1 through 330.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.