Lucene search

K
nvd[email protected]NVD:CVE-2023-5390
HistoryJan 31, 2024 - 6:15 p.m.

CVE-2023-5390

2024-01-3118:15:46
CWE-22
CWE-36
web.nvd.nist.gov
cve-2023-5390
vulnerability
honeywell experion
controledge
unauthorized access
file read
security notification
update
versioning

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.6%

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected configurations

NVD
Node
honeywellcontroledge_unit_operations_controllerMatch-
AND
honeywellcontroledge_unit_operations_controller_firmwareMatch-
Node
honeywellcontroledge_virtual_unit_operations_controllerMatch-
AND
honeywellcontroledge_virtual_unit_operations_controller_firmwareMatch-

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.6%

Related for NVD:CVE-2023-5390