CVE-2018-14825

Severity: medium (CVSS 5.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-24 · updated 2026-06-17
Weakness: CWE-269

Description

On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges. This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents.

Affected products

Honeywell Ck75: all versions
Honeywell Cn51: all versions
Honeywell Cn75: all versions
Honeywell Cn75E: all versions
Honeywell Cn80: all versions
Honeywell Ct40: all versions
Honeywell Ct50: all versions
Honeywell Ct60: all versions
Honeywell D75E: all versions
Honeywell Eda50: all versions
Honeywell Eda50K: all versions
Honeywell Eda51: all versions
Honeywell Eda60K: all versions
Honeywell Eda70: all versions

References

Get alerted when CVE-2018-14825 or the next vulnerability affects your stack