Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries

By Deeba Ahmed There is no evidence of exploitation of these vulnerabilities as yet. This is a post from HackRead.com Read the original post: Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on July 13, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-194-01 Siemens RUGGEDCOM ROX ICSA-23-194-02 Siemens SiPass Integrated ICSA-23-194-03...

CVE-2023-24474

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-22435

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

CVE-2023-24474

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-23585

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-22435

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

Design/Logic Flaw

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation...

Design/Logic Flaw

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

Stack overflow

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message...

CVE-2023-24474

CVE-2023-24474 affects Honeywell Experion PKS, LX, and PlantCruise servers, where a deserialization/messaging path can trigger a heap overflow leading to DoS (and possible remote impact per related entries). The confirmed description from CVE records notes a heap-based buffer overflow during hand...

CVE-2023-23585

The CVE-2023-23585 vulnerability affects Honeywell Experion PKS, LX, and PlantCruise. It is described as a heap-based buffer overflow that can occur while processing a specially crafted message for a specific configuration operation, leading to a Denial of Service and, in some sources, potential ...

CVE-2023-23585 Server DoS due to heap overflow

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-22435

CVE-2023-22435 affects Honeywell Experion PKS, LX, and PlantCruise (Experion Server/Console Station). The vulnerability is a stack overflow in processing a specially crafted message, potentially enabling DoS or remote code execution. Affected component references server::get_db_path_for_driver an...

CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message...

PT-2023-3883 · Honeywell · Honeywell Experion Pks

Name of the Vulnerable Software and Affected Versions: Honeywell Experion affected versions not specified Description: The issue is related to a heap overflow that could occur when handling a specially crafted message, potentially leading to a Denial of Service DoS. This heap overflow is associat...

PT-2023-3880 · Honeywell · Honeywell Experion Pks +2

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS affected versions not specified Honeywell Experion LX affected versions not specified Experion PlantCruise affected versions not specified Description: The issue is related to a stack overflow when decoding a message fr...

PT-2023-3882 · Honeywell · Honeywell Experion Pks +2

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS affected versions not specified Honeywell Experion LX affected versions not specified Experion PlantCruise affected versions not specified Description: The issue is related to a server information leak of configuration...