Researcher finds high-risk vulnerability in Honeywell building management controller, but the vendor disputes the severity and impact.