CVE-2023-25078

CVE-2023-25078 affects Honeywell Experion PKS, LX, and PlantCruise servers/console stations. The vulnerability is a heap-based buffer overflow that can occur while processing a specially crafted configuration message, leading to a DoS and, per some sources, potential remote impact. Affected versi...

CVE-2023-25948

CVE-2023-25948 corresponds to a server information leak of configuration data triggered by errors in response to specially crafted messages for Honeywell Experion PKS, LX, and PlantCruise. Affected products involve Honeywell’s Experion PKS/LX/PlantCruise platforms with root cause described as inf...

CVE-2023-23585

The CVE-2023-23585 vulnerability affects Honeywell Experion PKS, LX, and PlantCruise. It is described as a heap-based buffer overflow that can occur while processing a specially crafted message for a specific configuration operation, leading to a Denial of Service and, in some sources, potential ...

CVE-2023-22435

CVE-2023-22435 affects Honeywell Experion PKS, LX, and PlantCruise (Experion Server/Console Station). The vulnerability is a stack overflow in processing a specially crafted message, potentially enabling DoS or remote code execution. Affected component references server::get_db_path_for_driver an...

CVE-2023-24474

CVE-2023-24474 affects Honeywell Experion PKS, LX, and PlantCruise servers, where a deserialization/messaging path can trigger a heap overflow leading to DoS (and possible remote impact per related entries). The confirmed description from CVE records notes a heap-based buffer overflow during hand...