Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries

By Deeba Ahmed There is no evidence of exploitation of these vulnerabilities as yet. This is a post from HackRead.com Read the original post: Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on July 13, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-194-01 Siemens RUGGEDCOM ROX ICSA-23-194-02 Siemens SiPass Integrated ICSA-23-194-03...

CVE-2023-24474

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-22435

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

CVE-2023-23585

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-24474

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-22435

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

Design/Logic Flaw

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation...

Stack overflow

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

Design/Logic Flaw

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-24474

CVE-2023-24474 affects Honeywell Experion PKS, LX, and PlantCruise servers, where a deserialization/messaging path can trigger a heap overflow leading to DoS (and possible remote impact per related entries). The confirmed description from CVE records notes a heap-based buffer overflow during hand...

CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-23585 Server DoS due to heap overflow

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-23585

The CVE-2023-23585 vulnerability affects Honeywell Experion PKS, LX, and PlantCruise. It is described as a heap-based buffer overflow that can occur while processing a specially crafted message for a specific configuration operation, leading to a Denial of Service and, in some sources, potential ...

CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

CVE-2023-22435

CVE-2023-22435 affects Honeywell Experion PKS, LX, and PlantCruise (Experion Server/Console Station). The vulnerability is a stack overflow in processing a specially crafted message, potentially enabling DoS or remote code execution. Affected component references server::get_db_path_for_driver an...

PT-2023-3879 · Honeywell · Honeywell Experion Pks +2

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS versions affected versions not specified Honeywell Experion LX versions affected versions not specified Experion PlantCruise versions affected versions not specified Description: The issue is related to the restoration ...

Honeywell Products 缓冲区错误漏洞

Honeywell Products is a family of products from Honeywell USA. A buffer error vulnerability exists in Honeywell Products, which stems from the Experion server DoS is due to a heap overflow that occurs during the processing of a specially crafted message for a specific configuration operation...

PT-2023-3883 · Honeywell · Honeywell Experion Pks

Name of the Vulnerable Software and Affected Versions: Honeywell Experion affected versions not specified Description: The issue is related to a heap overflow that could occur when handling a specially crafted message, potentially leading to a Denial of Service DoS. This heap overflow is associat...