Which products and versions are affected by CVE-2013-0108?

Affected: Comfortpoint Open Manager Station (Honeywell) versions r100; Enterprise Buildings Integrator (Honeywell) versions r310, r400.2, r410.1, r410.2; Symmetre (Honeywell) versions r310, r400.2, r410.1. The full list is in the CVE brief.

Is CVE-2013-0108 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2013-0108 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2013-0108?

Public exploit code is available.

Is there a fix for CVE-2013-0108?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2013-0108 be patched?

Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

Request A Demo

Emerging threatsMedium

CVE-2013-0108Enterprise Buildings Integrator Code Injection

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to…

Published Feb 24, 2013 · Updated Apr 28, 2026

Key Facts

Routine patching

CVE-2013-0108 is a medium-severity vulnerability (CVSS 6.8 v2) affecting Comfortpoint Open Manager Station (Honeywell), Enterprise Buildings Integrator (Honeywell), Symmetre (Honeywell).
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 27% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

Scores

CVSS v2

6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

27%

Higher than 98.0% of all scored CVEs

Exploit maturity

Weaponized

ATLAS score

44/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Weaponized

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Description

Affected Products

8 affected entries in total

Product	Affected versions	Fixed in
Comfortpoint Open Manager StationHoneywell	r100	n/a
Enterprise Buildings IntegratorHoneywell	r310, r400.2, r410.1, r410.2	n/a
SymmetreHoneywell	r310, r400.2, r410.1	n/a

Timeline

Publicly disclosed
Feb 24, 2013
Last updated
Apr 28, 2026

Weakness Type

CWE-94 Improper Control of Generation of Code ('Code Injection')

References

exploitMSF honeywell_hscremotedeploy_exec.rb
exploitExploitDB-24745
otherics-cert.us-cert.gov · ICSA-13-053-02.pdf

FAQ

Common Questions.

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML d…
Affected: Comfortpoint Open Manager Station (Honeywell) versions r100; Enterprise Buildings Integrator (Honeywell) versions r310, r400.2, r410.1, r410.2; Symmetre (Honeywell) versions r310, r400.2, r410.1. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

Is CVE-2013-0108 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.