medium6.8Public exploit code
CVE-2013-0108
An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Honeywell HSC Remote Deployer - ActiveX Remote Code Execution (Metasploit)2013-03-13 · remote · windows · Verified
Impact
An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | Enterprise Buildings Integrator | Versions r310, r400.2, r410.1, r410.2 |
| Honeywell | Symmetre | Versions r310, r400.2, r410.1 |
| Honeywell | Comfortpoint Open Manager Station | Version r100 |