CVE-2023-5878 OneWireless command injection possible when updating firmware
Authenticated attackers can execute arbitrary commands via the firmware update process in Honeywell OneWireless Wireless Device Manager.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5878?
CVE-2023-5878 is a critical command injection vulnerability in Honeywell OneWireless Network Wireless Device Manager, published on 6 Feb 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Honeywell OneWireless
Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading to a command injection. Honeywell recommends updating to
R322.3, R330.2 or the most recent version of this product2.
Weakness: CWE-77
Which versions are affected by CVE-2023-5878?
How do I fix CVE-2023-5878?
No fix has been published for CVE-2023-5878 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-5878 being exploited?
There is no known exploitation of CVE-2023-5878 in the wild and no public exploit code.
Sources
Also known as GHSA-6xff-6366-vrm2.