Lucene search
HistoryJul 13, 2023 - 11:15 a.m.
CVE-2023-24480
controller dos
stack overflow
decoding message
server
upgrade
versioning
security notification
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
22.8%
Controller DoS due to stack overflow when decoding a message from the server.
See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected configurations
Node
honeywellc300Match-
honeywellc300_firmwareRange501.1–501.6hf8
ORhoneywellc300_firmwareRange510.1–510.2hf12
ORhoneywellc300_firmwareRange511.1–511.5tcu3
ORhoneywellc300_firmwareRange520.1–520.1tcu4
ORhoneywellc300_firmwareRange520.2–520.2tcu2
References
Related
prion
prion
Stack overflow
2023-07-13 11:15:00
nessus
nessus
cve
cve
CVE-2023-24480
2023-07-13 11:15:08
cvelist
cvelist
ics
ics
Honeywell Experion PKS, LX and PlantCruise
2023-07-13 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
22.8%
Related for NVD:CVE-2023-24480