← Database

CVE-2021-38399

HIGH CVSS: 7.5 Published: 2022-10-28 Modified: 2026-06-17

Description

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.

Affected Platforms

Honeywell C200E FirmwareHoneywell C300Honeywell C300 FirmwareHoneywell C200EHoneywell C200 FirmwareHoneywell Application Control EnvironmentHoneywell C200Honeywell Application Control Environment Firmware

Weakness Type

CWE-23, CWE-22

References