Lucene search

[email protected]CVE-2016-2280

HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-2280

2016-04-2111:00:09

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-2280

buffer overflow

rdiserver

honeywell

uniformance

process history database

phd

denial of service

service outage

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial of service (service outage) via unspecified vectors.

Affected configurations

NVD

Node

honeywelluniformance_process_history_databaseMatchr310

honeywelluniformance_process_history_databaseMatchr320

honeywelluniformance_process_history_databaseMatchr321

CPENameOperatorVersion
honeywell:uniformance_process_history_databasehoneywell uniformance process history databaseeqr310
honeywell:uniformance_process_history_databasehoneywell uniformance process history databaseeqr320
honeywell:uniformance_process_history_databasehoneywell uniformance process history databaseeqr321

CPE	Name	Operator	Version
honeywell:uniformance_process_history_database	honeywell uniformance process history database	eq	r310
honeywell:uniformance_process_history_database	honeywell uniformance process history database	eq	r320
honeywell:uniformance_process_history_database	honeywell uniformance process history database	eq	r321

References

ics-cert.us-cert.gov/advisories/ICSA-16-070-02

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

Related for CVE-2016-2280

ics2 prion1 cvelist1 nvd1