{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-14T09:59:24.030","vulnerabilities":[{"cve":{"id":"CVE-2021-38399","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2022-10-28T02:15:17.040","lastModified":"2024-11-21T06:17:00.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories."},{"lang":"es","value":"Los controladores Honeywell Experion PKS C200, C200E, C300 y ACE son vulnerables al Path Traversal relativa, lo que puede permitir que un atacante acceda a archivos y directorios no autorizados."}],"metrics":{"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:honeywell:c200_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"89205AE1-0EE7-4665-8FE6-5312EAD5FB2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:honeywell:c200:-:*:*:*:*:*:*:*","matchCriteriaId":"B3F154A3-2438-4420-8B6E-E0521376714E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:honeywell:c200e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B06800D-443D-4237-8E91-98735E5EA148"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:honeywell:c200e:-:*:*:*:*:*:*:*","matchCriteriaId":"6ACB0AD6-5A19-4DEC-9F47-03EC6FA80AC0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:honeywell:c300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7C79B7D1-630B-4723-BFCA-66F03F93D1FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:honeywell:c300:-:*:*:*:*:*:*:*","matchCriteriaId":"CEA14D67-E320-490E-92E6-CC135EBBA245"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:honeywell:application_control_environment_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"83F4F4B6-E05B-43B9-96ED-02919E42AFCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:honeywell:application_control_environment:-:*:*:*:*:*:*:*","matchCriteriaId":"7C79B55A-11AB-441E-A544-9678616E9BA4"}]}]}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf","source":"ics-cert@hq.dhs.gov","tags":["Product"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}}]}