Lucene search

[email protected]CVE-2023-25078

HistoryJul 13, 2023 - 11:15 a.m.

CVE-2023-25078

2023-07-1311:15:09

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-25078

nvd

dos

heap overflow

message handling

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.6%

JSON

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.

See Honeywell Security Notification for recommendations on upgrading and versioning.

CPENameOperatorVersion
honeywell:experion_serverhoneywell experion serverle501.6hf8
honeywell:experion_serverhoneywell experion serverle510.2hf12
honeywell:experion_serverhoneywell experion serverle511.5tcu3
honeywell:experion_serverhoneywell experion serverle520.1tcu4
honeywell:experion_serverhoneywell experion serverle520.2tcu2

CPE	Name	Operator	Version
honeywell:experion_server	honeywell experion server	le	501.6hf8
honeywell:experion_server	honeywell experion server	le	510.2hf12
honeywell:experion_server	honeywell experion server	le	511.5tcu3
honeywell:experion_server	honeywell experion server	le	520.1tcu4
honeywell:experion_server	honeywell experion server	le	520.2tcu2

References

process.honeywell.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.6%

JSON

Related for CVE-2023-25078

prion1 cvelist1 ics1