--- title: "Honeywell C200E vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/honeywell/c200e type: product description: "Honeywell C200E has 8 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2025-07-10 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Honeywell C200E vulnerabilities Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell) - **Published CVEs:** 8 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 0 - **Average CVSS:** 8.5 - **First CVE:** 2022-10-28 - **Latest CVE:** 2025-07-10 - **Platforms:** experion pks ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 3 | | High | 4 | | Medium | 1 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-191](https://radicalnotion.ai/cwe/cwe-191) | Integer Underflow (Wrap or Wraparound) | 2 | | [CWE-226](https://radicalnotion.ai/cwe/cwe-226) | Sensitive Information in Resource Not Removed Before Reuse | 1 | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 1 | | [CWE-430](https://radicalnotion.ai/cwe/cwe-430) | Deployment of Wrong Handler | 1 | | [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 | | [CWE-74](https://radicalnotion.ai/cwe/cwe-74) | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 1 | | [CWE-23](https://radicalnotion.ai/cwe/cwe-23) | Relative Path Traversal | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2022 | 3 | | 2023 | 0 | | 2024 | 0 | | 2025 | 5 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | 520.1 \<= v \<= 520.2 TCU9 | range | 5 | | 530 \<= v \<= 530 TCU3 | range | 5 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2025-3947 | Integer underflow during processing of short network packets in CDA FTEB responder | high | 8.2 | No | No | No | | CVE-2025-3946 | Incorrect response generation during FTEB protocol processing | high | 8.2 | No | No | No | | CVE-2025-2523 | Lack of buffer clearing before reuse may result in incorrect system behavior. | critical | 9.4 | No | No | No | | CVE-2025-2522 | Lack of buffer clearing before reuse may result in incorrect system behavior. | medium | 6.5 | No | No | No | | CVE-2025-2521 | Lack of indexes’ validation against buffer borders leads to remote code execution. | high | 8.6 | No | No | No | | CVE-2021-38397 | Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type | critical | 10.0 | No | No | No | | CVE-2021-38395 | Honeywell Experion PKS and ACE Controllers Injection | critical | 9.8 | No | No | No | | CVE-2021-38399 | Honeywell Experion PKS and ACE Controllers Relative Path Traversal | high | 7.5 | No | No | No | ## Frequently asked questions ### How many CVEs does Honeywell C200E have? Honeywell C200E has 8 published CVE records since 2022. ### How many Honeywell C200E CVEs are in CISA KEV? None of Honeywell C200E's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Honeywell C200E vulnerabilities? No Honeywell C200E CVEs currently have a tracked public exploit in this dataset. ### Which versions of Honeywell C200E are affected? 2 distinct Honeywell C200E versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Honeywell C200E CVEs? Honeywell C200E's CVEs most often map to these CWE weakness types: CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-226 (Sensitive Information in Resource Not Removed Before Reuse), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-430 (Deployment of Wrong Handler). ### How many critical Honeywell C200E vulnerabilities are there? Honeywell C200E has 3 critical and 4 high-severity CVEs. ### What is the average severity of Honeywell C200E CVEs? The average CVSS base score across Honeywell C200E's scored CVEs is 8.5. ## Other products from this vendor - [Experion Server](https://radicalnotion.ai/vendor/honeywell/experion-server) (17 CVEs) - [C300](https://radicalnotion.ai/vendor/honeywell/c300) (9 CVEs) - [Experion PKS](https://radicalnotion.ai/vendor/honeywell/experion-pks) (9 CVEs) - [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs) - [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs) - [experion process knowledge system](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system) (7 CVEs) - [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs) - [FIM4](https://radicalnotion.ai/vendor/honeywell/fim4) (6 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/c200e). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.