Experion Station Security Vulnerabilities - 2023

CVE-2023-22435

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

CVE-2023-23585

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.

CVE-2023-24474

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

CVE-2023-25078

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.

CVE-2023-25948

Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.