CVE-2023-24480

🗓️ 13 Jul 2023 10:57:46Reported by HoneywellType

CVE-2023-24480 Controller DoS due to stack overflow when decoding a message from the server

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerabilities of the microprogramming software for Honeywell Experion PKS programmable logic controllers, the measurement and computing controllers Experion LX, and the distribution control system Experion PlantCruise allow a intruder to execute arbitrary code.	28 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-24480	13 Jul 202314:52	–	circl
CNNVD	Honeywell Products 缓冲区错误漏洞	13 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-24480 Controller stack overflow when decoding messages from the server	13 Jul 202310:57	–	cvelist
EUVD	EUVD-2023-28498	3 Oct 202520:07	–	euvd
ICS	Honeywell Experion PKS, LX and PlantCruise	13 Jul 202300:00	–	ics
NVD	CVE-2023-24480	13 Jul 202311:15	–	nvd
OSV	CVE-2023-24480	13 Jul 202311:15	–	osv
Prion	Stack overflow	13 Jul 202311:15	–	prion
Positive Technologies	PT-2023-3880 · Honeywell · Honeywell Experion Pks +2	13 Jul 202300:00	–	ptsecurity

NVD

Node

honeywell c300_firmwareRange501.1–501.6hf8

honeywell c300_firmwareRange510.1–510.2hf12

honeywell c300_firmwareRange511.1–511.5tcu3

honeywell c300_firmwareRange520.1–520.1tcu4

honeywell c300_firmwareRange520.2–520.2tcu2

AND

honeywell c300Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion PKS"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "501.6HF8",
        "status": "affected",
        "version": "501.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "510.2HF12",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "511.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion LX",
      "Experion PlantCruise"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
process	www.process.honeywell.com/

17 Jun 2026 05:39Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.5 - 9.8

EPSS0.006

SSVC