← Database

CVE-2022-43485

MEDIUM CVSS: 6.2 Published: 2023-05-30 Modified: 2026-06-17

Description

Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1

Affected Platforms

Honeywell Onewireless Network Wireless Device Manager FirmwareHoneywell Onewireless Network Wireless Device Manager

Weakness Type

CWE-330, CWE-330

References