Skip to content
Fencer Intel
medium 5.8

CVE-2018-14825 json

On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android…

published 8y ago modified 4mo ago also EUVD-2018-6709

cvss
5.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits
0
none known

Summary

On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges. This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents.

Is CVE-2018-14825 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-303-01 updated cvss 7.6

PEPPERL+FUCHS CT50-Ex

  • PEPPERL+FUCHS CT50-Ex 4.4, 6.0
    affected: mitigation “For more information CERT @ VDE has released a security advisory found at:” hsmftp.honeywell.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-18-256-01 updated cvss 7.6

Honeywell Mobile Computers with Android Operating Systems

  • Honeywell CK75 running Android OS 6.0 Honeywell CN51 running Android OS 6.0 Honeywell CN75 running Android OS 6.0 Honeywell CN75e running Android OS 6.0 Honeywell CN80 running Android OS 7.1 Honeywell CT40 running Android OS 7.1
    +9 more products
    Honeywell CT50 running Android OS 6.0, 4.4 Honeywell CT60 running Android OS 7.1 Honeywell D75e running Android OS 4.4, 6.0 Honeywell EDA50 running Android OS 7.1 Honeywell EDA50k running Android 4.4 Honeywell EDA50k running Android OS 7.1 Honeywell EDA51 running Android OS 8.1 Honeywell EDA60k running Android OS 7.1 Honeywell EDA70 running Android OS 7.1
    affected: fixed in 2.30.00.0167, mitigation “Honeywell strongly recommends that users upgrade to the version identified below to resolve the vulnerability.” hsmftp.honeywell.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 5.8 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

  • Honeywell Mobile Computers

Classification

Weakness
  • CWE-269 Improper Privilege Management
  • CWE-732 Incorrect Permission Assignment for Critical Resource

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.