Lucene search
+L

237 matches found

CVE
CVE
•added 2024/04/17 4:38 p.m.•87 views

CVE-2023-5397

CVE-2023-5397 affects Honeywell Experion PKS/LX/PlantCruise/Safety Manager and Safety Manager SC. The root cause is a server receiving a malformed message to establish a new connection, enabling remote code execution or causing a failure. Public documentation from multiple sources confirms an imp...

8.1CVSS7.7AI score0.00773EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/17 4:38 p.m.•35 views

CVE-2023-5397

Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS8.6AI score0.00773EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/17 4:37 p.m.•26 views

CVE-2023-5395

Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS8.2AI score0.00746EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/17 4:37 p.m.•33 views

CVE-2023-5395

Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS8.7AI score0.00746EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/17 4:37 p.m.•90 views

CVE-2023-5395

CVE-2023-5395 affects Honeywell Experion components (e.g., Experion PKS/LX/PlantCruise, Safety Manager) where a server may process a malformed message that uses a hostname in an internal table, causing a stack-based overflow and potential remote code execution. The vulnerability is documented acr...

8.1CVSS7.8AI score0.00746EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•16 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server, which stems from the fact that the server's receipt of a malformed...

8.1CVSS7AI score0.00746EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•17 views

PT-2024-14796 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue occurs when a server receives a malformed message, creating a connection for a hostname that may cause a stack overflow, potentially leading to remote code execution...

7.4CVSS7.8AI score0.00711EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•12 views

PT-2024-14798 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue is related to a server receiving a malformed message based on a list of IPs, resulting in heap corruption and causing a denial of service. Recommendations: At the moment, there ...

5.9CVSS7.2AI score0.00443EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•17 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server that originates from the server receiving a malformed message based o...

5.9CVSS6.8AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•18 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server that stems from the server receiving a malformed message containing a...

8.1CVSS8AI score0.00746EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•15 views

PT-2024-14795 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue occurs when a server receives a malformed message that uses the hostname in an internal table, potentially causing a stack overflow and leading to possible remote code execution...

8.1CVSS8AI score0.00746EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•15 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server that originates when the server receives a malformed message that...

7.4CVSS7.8AI score0.00711EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•18 views

PT-2024-14797 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue arises when a server receives a malformed message to create a new connection, potentially allowing an attacker to perform remote code execution or cause a failure...

8.1CVSS8AI score0.00773EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•30 views

PT-2024-14802 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue occurs when a server receives a malformed message, causing a pointer to be overwritten. This can result in remote code execution or failure. Recommendations: At the moment, ther...

8.1CVSS7.9AI score0.00724EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•3 views

CVE-2023-5400: Heap-based Buffer Overflow

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS6.4AI score0.00746EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•6 views

CVE-2023-5398: Binding to an Unrestricted IP Address

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning...

5.9CVSS6.2AI score0.00443EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•4 views

CVE-2023-5397: Improper Input Validation

Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS6.2AI score0.00773EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•4 views

CVE-2023-5396: Buffer Access with Incorrect Length Value

Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning...

7.4CVSS5.9AI score0.00711EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•5 views

CVE-2023-5401: Stack-based Buffer Overflow

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS6.4AI score0.00746EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•5 views

CVE-2023-5404: Heap-based Buffer Overflow

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

8.1CVSS6.1AI score0.00724EPSS
SaveExploits0References2
Rows per page
Query Builder