CVE-2023-26597

🗓️ 13 Jul 2023 11:04:55Reported by HoneywellType

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerabilities of the microprogrammed software in Honeywell Experion PKS programmable logic controllers, Honeywell Experion LX measurement and control controllers, and the Experion PlantCruise distribution control system allow a intruder to trigger malfunctions during maintenance operations.	28 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-26597	13 Jul 202316:21	–	circl
CNNVD	Honeywell Products 缓冲区错误漏洞	13 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-26597 Controller DOS on sending error response	13 Jul 202311:04	–	cvelist
EUVD	EUVD-2023-30392	3 Oct 202520:07	–	euvd
ICS	Honeywell Experion PKS, LX and PlantCruise	13 Jul 202300:00	–	ics
NVD	CVE-2023-26597	13 Jul 202312:15	–	nvd
OSV	CVE-2023-26597	13 Jul 202312:15	–	osv
Prion	Buffer overflow	13 Jul 202312:15	–	prion
Positive Technologies	PT-2023-3881 · Honeywell · Honeywell Experion Plantcruise +2	13 Jul 202300:00	–	ptsecurity

NVD

Node

honeywell c300_firmwareRange501.1–501.6hf8

honeywell c300_firmwareRange510.1–510.2hf12

honeywell c300_firmwareRange511.1–511.5tcu3

honeywell c300_firmwareRange520.1–520.1tcu4

honeywell c300_firmwareRange520.2–520.2tcu2

AND

honeywell c300Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion PKS"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "501.6HF8",
        "status": "affected",
        "version": "501.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "510.2HF12",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "511.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Experion LX",
      "Experion PlantCruise"
    ],
    "product": "C300",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThanOrEqual": "511.5TCU3",
        "status": "affected",
        "version": "510.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.1TCU4",
        "status": "affected",
        "version": "520.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "520.2TCU2",
        "status": "affected",
        "version": "520.2",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
process	www.process.honeywell.com/

21 Nov 2024 07:51Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5

EPSS0.00074

SSVC