CVE-2014-5435

CVE-2014-5435 involves an arbitrary memory write vulnerability in the Honeywell Experion PKS components, specifically the dual_onsrv.exe module, affecting the R40x line before R400.6, R41x before R410.6, and R43x before R430.2. The flaw could enable remote code execution or denial of service. The...

CVE-2014-5436

A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions...

CVE-2014-5436

CVE-2014-5436 affects Honeywell Experion PKS by a directory traversal in the confd.exe module. The vulnerability spans Honeywell EKPS/Experion PKS releases: R40x before R400.6, R41x before R410.6, and R43x before R430.2, and could lead to information disclosure. Root cause is a directory traversa...

CVE-2014-9186

A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell...

CVE-2014-9186

CVE-2014-9186 affects Honeywell Experion PKS confd.exe modules. The vulnerability is a file inclusion flaw in confd.exe (and related modules noted in the CVE family) that could allow an arbitrary file to be accepted into a function, with potential information disclosure or remote code execution. ...

Heap overflow

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and...

Stack overflow

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service...

CVE-2014-9187

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and...

CVE-2014-9189

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service...

CVE-2014-9187

CVE-2014-9187 involves multiple heap-based buffer overflow vulnerabilities in Honeywell Experion PKS modules (confd.exe, dual_onsrv.exe, hscodbcn.exe, ripsd.exe) that affect all versions prior to R400.6, R410.6, and R430.2. Root cause: heap-based memory corruption could lead to remote code execut...

CVE-2014-9187

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and...

CVE-2014-9189

CVE-2014-9189 affects Honeywell Experion PKS modules (confd.exe, dual_onsrv.exe, hscodbcn.exe, pscdasrv.exe) with multiple heap- and stack-based buffer overflow vulnerabilities that could enable remote code execution, memory corruption, or denial of service. Affected are all EKPS versions before ...

CVE-2014-9189

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service...

CVE-2016-8344

An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...

CVE-2016-8344

An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...

CVE-2016-8344

An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...

Input validation

An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...

CVE-2016-8344

An issue was discovered in Honeywell Experion Process Knowledge System PKS platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a...

CVE-2016-8344

CVE-2016-8344 affects Honeywell Experion PKS (Release 3xx and prior; 400, 410, 430, 431) where input is not properly validated. A specially crafted packet could cause the process to terminate, and a successful exploit would prevent firmware uploads to Series-C devices. Exploitation is listed as r...

Honeywell Experion PKS Denial of Service Vulnerability

Honeywell EPKS for automation and control of industrial and manufacturing processes are distributed control system solutions, including Web-based SCADA systems. A denial of service vulnerability exists in Honeywell Experion PKS. An attacker could exploit this vulnerability to trigger a denial of...