---
title: "Honeywell FIM4 vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/honeywell/fim4
type: product
description: "Honeywell FIM4 has 6 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2025-07-10
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Honeywell FIM4 vulnerabilities

Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell)

- **Published CVEs:** 6
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 0
- **Average CVSS:** 8.1
- **First CVE:** 2025-07-10
- **Latest CVE:** 2025-07-10
- **Platforms:** experion pks

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 1 |
| High | 4 |
| Medium | 1 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-191](https://radicalnotion.ai/cwe/cwe-191) | Integer Underflow (Wrap or Wraparound) | 2 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 1 |
| [CWE-226](https://radicalnotion.ai/cwe/cwe-226) | Sensitive Information in Resource Not Removed Before Reuse | 1 |
| [CWE-430](https://radicalnotion.ai/cwe/cwe-430) | Deployment of Wrong Handler | 1 |
| [CWE-457](https://radicalnotion.ai/cwe/cwe-457) | Use of Uninitialized Variable | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2025 | 6 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| 520.1 \<= v \<= 520.2 TCU9 | range | 6 |
| 530 \<= v \<= 530 TCU3 | range | 6 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2025-3947 | Integer underflow during processing of short network packets in CDA FTEB responder | high | 8.2 | No | No | No |
| CVE-2025-3946 | Incorrect response generation during FTEB protocol processing | high | 8.2 | No | No | No |
| CVE-2025-2523 | Lack of buffer clearing before reuse may result in incorrect system behavior. | critical | 9.4 | No | No | No |
| CVE-2025-2522 | Lack of buffer clearing before reuse may result in incorrect system behavior. | medium | 6.5 | No | No | No |
| CVE-2025-2521 | Lack of indexes’ validation against buffer borders leads to remote code execution. | high | 8.6 | No | No | No |
| CVE-2025-2520 | Dereferencing of an uninitialized pointer leads to denial of service. | high | 7.5 | No | No | No |

## Frequently asked questions

### How many CVEs does Honeywell FIM4 have?

Honeywell FIM4 has 6 published CVE records since 2025.

### How many Honeywell FIM4 CVEs are in CISA KEV?

None of Honeywell FIM4's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Honeywell FIM4 vulnerabilities?

No Honeywell FIM4 CVEs currently have a tracked public exploit in this dataset.

### Which versions of Honeywell FIM4 are affected?

2 distinct Honeywell FIM4 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Honeywell FIM4 CVEs?

Honeywell FIM4's CVEs most often map to these CWE weakness types: CWE-191 (Integer Underflow (Wrap or Wraparound)), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-226 (Sensitive Information in Resource Not Removed Before Reuse), CWE-430 (Deployment of Wrong Handler).

### How many critical Honeywell FIM4 vulnerabilities are there?

Honeywell FIM4 has 1 critical and 4 high-severity CVEs.

### What is the average severity of Honeywell FIM4 CVEs?

The average CVSS base score across Honeywell FIM4's scored CVEs is 8.1.

## Other products from this vendor

- [Experion Server](https://radicalnotion.ai/vendor/honeywell/experion-server) (17 CVEs)
- [C300](https://radicalnotion.ai/vendor/honeywell/c300) (9 CVEs)
- [Experion PKS](https://radicalnotion.ai/vendor/honeywell/experion-pks) (9 CVEs)
- [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs)
- [C200E](https://radicalnotion.ai/vendor/honeywell/c200e) (8 CVEs)
- [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs)
- [experion process knowledge system](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system) (7 CVEs)
- [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/fim4). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.