Lucene search
HistoryJul 13, 2023 - 11:15 a.m.
CVE-2023-25770
buffer overflow
controller dos
honeywell security notification
upgrade recommendations
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
22.8%
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected configurations
Node
honeywellc300_firmwareRange501.1–501.6hf8
ORhoneywellc300_firmwareRange510.1–510.2hf12
ORhoneywellc300_firmwareRange511.1–511.5tcu3
ORhoneywellc300_firmwareRange520.1–520.1tcu4
ORhoneywellc300_firmwareRange520.2–520.2tcu2
honeywellc300Match-
References
Related
cvelist
cvelist
prion
prion
Buffer overflow
2023-07-13 11:15:00
nessus
nessus
vulnrichment
vulnrichment
cve
cve
CVE-2023-25770
2023-07-13 11:15:09
ics
ics
Honeywell Experion PKS, LX and PlantCruise
2023-07-13 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
22.8%
Related for NVD:CVE-2023-25770