CVE-2022-43485

—

CVSS 3.1

6.5 medium

EPSS

<1%p40

Published

May 30, 2023 (May 30, 2023)

Modified

Jun 17, 2026

Description

Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1

Vendors: honeywell
Products: onewireless network wireless device manager firmware
Weakness: CWE-330
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.