EUVD-2023-28492

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Experion server vulnerable to DoS from heap overflow when processing crafted message.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerabilities of the microprogramming software for Honeywell Experion PKS programmable logic controllers, the measurement and computing controllers Experion LX, and the distribution control system Experion PlantCruise allow a intruder to execute arbitrary code.	28 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-24474	13 Jul 202314:55	–	circl
CNNVD	Honeywell Products 缓冲区错误漏洞	13 Jul 202300:00	–	cnnvd
CVE	CVE-2023-24474	13 Jul 202310:56	–	cve
Cvelist	CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller	13 Jul 202310:56	–	cvelist
ICS	Honeywell Experion PKS, LX and PlantCruise	13 Jul 202300:00	–	ics
NVD	CVE-2023-24474	13 Jul 202311:15	–	nvd
Prion	Design/Logic Flaw	13 Jul 202311:15	–	prion
Positive Technologies	PT-2023-3883 · Honeywell · Honeywell Experion Pks	13 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-24474	23 May 202503:12	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "dba35714-2a9a-3e78-a1fb-43166a86be69",
        "vendor": {
          "name": "Honeywell"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "34ebdace-a4db-33bf-8ffc-7c8f4cd73b5c",
        "product": {
          "name": "Experion Station"
        },
        "product_version": "510.1 ≤510.2HF12"
      },
      {
        "id": "4b909e6c-2d2b-3d1c-bd03-69afcff9cf7e",
        "product": {
          "name": "Engineering Station"
        },
        "product_version": "520.2 ≤520.2TCU2"
      },
      {
        "id": "5b6ea930-e281-3f1c-990a-7e06f70b5a3a",
        "product": {
          "name": "Experion Server"
        },
        "product_version": "510.1 ≤510.2HF12"
      },
      {
        "id": "679bb286-cb11-3825-9d18-ecd14532fe1a",
        "product": {
          "name": "Experion Server"
        },
        "product_version": "501.1 ≤501.6HF8"
      },
      {
        "id": "97b71e86-55e1-33eb-8e0a-99054052559c",
        "product": {
          "name": "Experion Server"
        },
        "product_version": "511.1 ≤511.5TCU3"
      },
      {
        "id": "9a43a1f6-0fcc-3272-bd4d-ebeb2ae3ea0b",
        "product": {
          "name": "Experion Station"
        },
        "product_version": "501.1 ≤501.6HF8"
      },
      {
        "id": "a7d4b30f-094a-3acf-ae8f-e19676cbc38c",
        "product": {
          "name": "Engineering Station"
        },
        "product_version": "520.1 ≤520.1TCU4"
      },
      {
        "id": "b5e5c9d1-d94f-35e2-ae72-2e141456e04a",
        "product": {
          "name": "Engineering Station"
        },
        "product_version": "510.1 ≤511.5TCU3"
      },
      {
        "id": "beb43c80-6d05-3600-8909-1d956ece67fe",
        "product": {
          "name": "Direct Station"
        },
        "product_version": "520.1 ≤520.1TCU4"
      },
      {
        "id": "da3044f5-2071-3595-868c-7f23111defa1",
        "product": {
          "name": "Experion Server"
        },
        "product_version": "520.2 ≤520.2TCU2"
      },
      {
        "id": "df4a6542-c202-30dd-8b3d-26d23af2e95d",
        "product": {
          "name": "Direct Station"
        },
        "product_version": "520.2 ≤520.2TCU2"
      },
      {
        "id": "e17f7771-9026-303c-932b-5e5f6e3d430e",
        "product": {
          "name": "Experion Station"
        },
        "product_version": "520.2 ≤520.2TCU2"
      },
      {
        "id": "e8442bdb-06a5-33f0-872d-43aeffc27714",
        "product": {
          "name": "Direct Station"
        },
        "product_version": "510.5 ≤511.5TCU3"
      },
      {
        "id": "f6da98b3-9053-353c-9709-271c37b897cf",
        "product": {
          "name": "Experion Server"
        },
        "product_version": "520.1 ≤520.1TCU4"
      },
      {
        "id": "f76e8cb0-255c-3690-b31f-dbd92792308e",
        "product": {
          "name": "Experion Station"
        },
        "product_version": "511.1 ≤511.5TCU3"
      },
      {
        "id": "f97eedd8-30f7-3913-84c6-73c70e8879ee",
        "product": {
          "name": "Experion Station"
        },
        "product_version": "520.1 ≤520.1TCU4"
      }
    ]
  }
]

Source	Link
process	www.process.honeywell.com/

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00049

SSVC