Vulnerabilities > Honeywell > Controledge PLC Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-08-31 CVE-2022-30318 Use of Hard-coded Credentials vulnerability in Honeywell Controledge PLC Firmware and Controledge RTU Firmware
Honeywell ControlEdge through R151.1 uses Hard-coded Credentials.
network
low complexity
honeywell CWE-798
critical
9.8
2020-06-26 CVE-2020-10628 Cleartext Transmission of Sensitive Information vulnerability in Honeywell Controledge PLC Firmware and Controledge RTU Firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.
network
low complexity
honeywell CWE-319
7.5
2020-06-26 CVE-2020-10624 Cleartext Transmission of Sensitive Information vulnerability in Honeywell Controledge PLC Firmware and Controledge RTU Firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.
network
low complexity
honeywell CWE-319
7.5