CVE-2022-2333: Honeywell SoftMaster Uncontrolled Search Path Element

Reference Links

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
• https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-22-256-02 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-22-256-02

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2022-2333.

• What is the severity rating of CVE-2022-2333?

  CVE-2022-2333 has a severity rating of 7.8 (high).

• What is the affected software for CVE-2022-2333?

  The affected software for CVE-2022-2333 is Honeywell SoftMaster version 4.51.

• How can an attacker exploit CVE-2022-2333?

  An attacker can exploit CVE-2022-2333 by tricking a valid user into loading a malicious DLL.

• What can an attacker achieve by exploiting CVE-2022-2333?

  By exploiting CVE-2022-2333, an attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application's context and permissions.