Honeywell Experion LX
view advisory published 2022-08-30
Successful exploitation of this vulnerability could allow for configuration manipulation and a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-30317US | critical9.1OT elevated | — | ||
Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experion LX Control Data Access (CDA)… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-242-07 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationExperion LX
R501.6, R511.5 and R520 releases have an update to incorporate the secure lock functionality. Secure lock restricts all firmware downloads to process controllers while the lock is invoked.
- FixedExperion LX
Experion LX R520.1 incorporates secure boot functionality and signed firmware images.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan