CVE:CVE-2013-0108
CNNVD:CNNVD-201302-554
Honeywell是一家著名的美国安防产品公司，Ademco是其防盗报警产品之一。
Honeywell Enterprise Buildings Integrator (EBI) R310，R400.2，R410.1，以及R410.2版本；SymmetrE R310，R410.1，以及R410.2版本；ComfortPoint Open Manager (又名CPO-M) Station R100版本；以及HMIWeb Browser客户端数据包中的HscRemoteDeploy.dll中的ActiveX控件中存在漏洞。远程攻击者可通过特制的HTML文档利用该漏洞执行任意代码。
solution:Upgrade honeywell enterprise_buildings_integrator to a higher version than r310,r400.2,r410.1,r410.2,and avoid the version r310,r400.2,r410.1,r410.2; Upgrade honeywell symmetre to a higher version than r310,r400.2,r410.1,and avoid the version r310,r400.2,r410.1; Upgrade honeywell comfortpoint_open_manager_station to a higher version than r100,and avoid the version r100