cpe:/a:honeywellprocess:enterprise_building_manager:r400 cpe:/a:honeywellprocess:enterprise_building_manager:r410.1 cpe:/a:honeywellprocess:experion:r200 cpe:/a:honeywellprocess:experion:r300 cpe:/a:honeywellprocess:experion:r310 cpe:/a:honeywellprocess:experion:r400.0 cpe:/a:honeywellprocess:symmetre:r410.1 CVE-2012-0254 2012-09-08T06:28:19.713-04:00 2012-09-10T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2012-09-10T11:01:00.000-04:00 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf MISC https://www.honeywellprocess.com/en-US/support/pages/all-notifications.aspx Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.