CVE-2022-2333

If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-09-16

Last modified

2025-04-16

Weaknesses

CWE-427

Affected products

• Softmaster (Honeywell)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
• https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-…