CVE-2023-5390

CVE-2023-5390 affects Honeywell ControlEdge VirtualUOC and ControlEdge UOC. The connected documents confirm an absolute path traversal flaw that could allow an attacker to read files from the controller over the network, exposing limited device information. The issue is triggered through unauthor...

Design/Logic Flaw

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files...