CVE-2022-4240CWE-306

Unauthenticated API allowing an attacker to obtain the information about network resources

Medium · published May 30, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-05-30T16:15Z
EPSS history
Timeline
  • 30 MAY 16:15Z
    Unauthenticated API allowing an attacker to obtain the information about network resources
    cvelistv5