CVE-2023-51605

🗓️ 03 May 2024 02:15:31Reported by zdiType

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerabilit

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2023-51605	3 May 202403:16	–	attackerkb
BDU FSTEC	The vulnerability of the programming software for PLCs (programmable logic controllers), namely the Saia PG5 Controls Suite, arises from incorrect restrictions on XML links to external objects. This allows attackers to gain unauthorized access to protected information.	27 Dec 202300:00	–	bdu_fstec
CNNVD	Honeywell Saia PG5 Controls Suite 安全漏洞	3 May 202400:00	–	cnnvd
Cvelist	CVE-2023-51605 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability	3 May 202402:15	–	cvelist
EUVD	EUVD-2023-56317	3 Oct 202520:07	–	euvd
NVD	CVE-2023-51605	3 May 202403:16	–	nvd
OSV	CVE-2023-51605	3 May 202403:16	–	osv
Vulnrichment	CVE-2023-51605 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability	3 May 202402:15	–	vulnrichment
Zero Day Initiative	(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability	20 Dec 202300:00	–	zdi

NVD

Vulners

Node

honeywell saia_pg5_controls_suiteMatch-

honeywell saia_pg5_controls_suiteMatch2.3.193

[
  {
    "vendor": "Honeywell",
    "product": "Saia PG5 Controls Suite",
    "versions": [
      {
        "version": "PG5 v2.3.193",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-1854/

17 Jun 2026 06:41Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.16.5

CVSS 35.5

EPSS0.00784

SSVC

CWE-611