CVE-2023-5407

Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5407

CVE-2023-5407 affects Honeywell Experion components (controller/server-side) and is a stack-based DoS caused by improper handling of specially crafted messages received by the controller. Public details in the ConnectedDocs indicate a remote-network vector with no authentication, high attack comp...

CVE-2023-5407

Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5406

Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5406

Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5406

CVE-2023-5406 : Honeywell's Experion components (Experion PKS, LX, PlantCruise by Experion, Safety Manager, Safety Manager SC) are affected. A vulnerability arises from server communication with a controller using a specially crafted message that can lead to remote code execution over a network. ...

CVE-2023-5405

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5405

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5405

CVE-2023-5405 affects Honeywell Experion PKS/LX/PlantCruise by Experion and Safety Manager/Safety Manager SC. A memory information leak in the CDA Server process occurs when an error response is generated to a specially crafted message, with the root cause described in the advisory as an out-of-b...

CVE-2023-5404

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5404

CVE-2023-5404 affects Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, and Safety Manager SC. Root cause: heap-based or out-of-bounds memory write triggered by processing a malformed message, potentially enabling remote code execution or service failure over the netwo...

CVE-2023-5403

Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5403

Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5401

CVE-2023-5401 affects Honeywell Experion products (PKS, LX, PlantCruise by Experion, Safety Manager, Safety Manager SC). A stack-based overflow can be triggered when the server receives a malformed message based on specified key values, potentially enabling remote code execution or a crash over t...

CVE-2023-5401

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5401

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5400

The CVE-2023-5400 issue is a heap-based buffer overflow in Honeywell Experion family components (Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager/Safety Manager SC) that triggers when the server receives a malformed message based on specified key values. Root cause: heap overflo...

CVE-2023-5400

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5398

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5398

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning...