CVE-2023-5406

Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5406

Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5406

CVE-2023-5406 : Honeywell's Experion components (Experion PKS, LX, PlantCruise by Experion, Safety Manager, Safety Manager SC) are affected. A vulnerability arises from server communication with a controller using a specially crafted message that can lead to remote code execution over a network. ...

CVE-2023-5405

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5405

CVE-2023-5405 affects Honeywell Experion PKS/LX/PlantCruise by Experion and Safety Manager/Safety Manager SC. A memory information leak in the CDA Server process occurs when an error response is generated to a specially crafted message, with the root cause described in the advisory as an out-of-b...

CVE-2023-5405

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5404

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5404

CVE-2023-5404 affects Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, and Safety Manager SC. Root cause: heap-based or out-of-bounds memory write triggered by processing a malformed message, potentially enabling remote code execution or service failure over the netwo...

CVE-2023-5403

Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5403

Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5401

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5401

CVE-2023-5401 affects Honeywell Experion products (PKS, LX, PlantCruise by Experion, Safety Manager, Safety Manager SC). A stack-based overflow can be triggered when the server receives a malformed message based on specified key values, potentially enabling remote code execution or a crash over t...

CVE-2023-5401

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5400

The CVE-2023-5400 issue is a heap-based buffer overflow in Honeywell Experion family components (Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager/Safety Manager SC) that triggers when the server receives a malformed message based on specified key values. Root cause: heap overflo...

CVE-2023-5400

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5398

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5398

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5398

CVE-2023-5398 affects Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, and Safety Manager SC. The vulnerability arises from the server receiving a malformed message based on a list of IPs, which can trigger a heap-based/ memory corruption leading to a denial-of-servic...

CVE-2023-5397

Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5397

CVE-2023-5397 affects Honeywell Experion PKS/LX/PlantCruise/Safety Manager and Safety Manager SC. The root cause is a server receiving a malformed message to establish a new connection, enabling remote code execution or causing a failure. Public documentation from multiple sources confirms an imp...