CVE-2023-25770

2023-07-1311:15:09

CWE-502

[email protected]

web.nvd.nist.gov

cve-2023-25770

controller dos

buffer overflow

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

JSON

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected configurations

NVD

Node

honeywellc300_firmwareRange501.1–501.6hf8

honeywellc300_firmwareRange510.1–510.2hf12

honeywellc300_firmwareRange511.1–511.5tcu3

honeywellc300_firmwareRange520.1–520.1tcu4

honeywellc300_firmwareRange520.2–520.2tcu2

AND

honeywellc300Match-

CPENameOperatorVersion
honeywell:c300_firmwarehoneywell c300 firmwarele501.6hf8
honeywell:c300_firmwarehoneywell c300 firmwarele510.2hf12
honeywell:c300_firmwarehoneywell c300 firmwarele511.5tcu3
honeywell:c300_firmwarehoneywell c300 firmwarele520.1tcu4
honeywell:c300_firmwarehoneywell c300 firmwarele520.2tcu2

CPE	Name	Operator	Version
honeywell:c300_firmware	honeywell c300 firmware	le	501.6hf8
honeywell:c300_firmware	honeywell c300 firmware	le	510.2hf12
honeywell:c300_firmware	honeywell c300 firmware	le	511.5tcu3
honeywell:c300_firmware	honeywell c300 firmware	le	520.1tcu4
honeywell:c300_firmware	honeywell c300 firmware	le	520.2tcu2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion PKS"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "501.6HF8",
        "status": "affected",
        "version": "501.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "510.2HF12",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "511.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion LX",
      "Experion PlantCruise"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  }
]