What’s Vulnerable › Vulnerabilities

CVE-2013-0108

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 26.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-02-24 · updated 2026-06-16
• Weakness: CWE-94

Description

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected products

• Honeywell Comfortpoint Open Manager Station: r100
• Honeywell Enterprise Buildings Integrator: r310, r400.2, r410.1, r410.2
• Honeywell Symmetre: r310, r400.2, r410.1

References

• http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf
• http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf

Get alerted when CVE-2013-0108 or the next vulnerability affects your stack