CVE-2021-38395

The CVE-2021-38395 entry applies to Honeywell Experion PKS C200, C200E, C300 and ACE controllers, where the vulnerability stems from improper neutralization of special elements in output. This condition can allow a remote attacker to execute arbitrary code and trigger a denial-of-service. Publicl...

CVE-2021-38397

CVE-2021-38397 affects Honeywell Experion PKS: C200, C200E, C300, and ACE controllers. Root cause is unrestricted file uploads (insufficient input validation) allowing remote code execution and DoS. Impact is high: potential remote compromise of ICS assets. Remediation varies: Honeywell has added...

CVE-2021-38399

CVE-2021-38399 affects Honeywell Experion PKS/C200, C200E, C300 and ACE controllers. The issue is a relative path traversal in the directory/file processing, potentially allowing an attacker to read arbitrary files or directories. NVD/NIST lists a base CVSSv3.1 score of 7.5 (HIGH) with NETWORK at...