Honeywell Experion PKS, LX and PlantCruise
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow privilege escalation or allow remote code execution.
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-26597US | high7.5 | — | ||
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgradin… | ||||
| CVE-2023-25948US | high7.5 | — | ||
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgr… | ||||
| CVE-2023-25770US | high7.5 | — | ||
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on up… | ||||
| CVE-2023-25178US | critical9.8OT elevated | — | ||
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
| ||||
| CVE-2023-25078US | high7.5 | — | ||
Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.
See Honeywell Security Not… | ||||
| CVE-2023-24480US | high7.5 | — | ||
Controller DoS due to stack overflow when decoding a message from the server.
See Honeywell Security Notification for recommendations on upgrading and versioning.
| ||||
| CVE-2023-24474US | high7.5 | — | ||
Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message | ||||
| CVE-2023-23585US | high7.5 | — | ||
Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.
See Honeywell Security Notification… | ||||
| CVE-2023-22435US | high7.5 | — | ||
Experion server may experience a DoS due to a stack overflow when handling a specially crafted message. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-194-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-194-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (54)
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion LX
Experion LX: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PKS
Experion PKS: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- FixedExperion PlantCruise
Experion PlantCruise: Update to version R520.2
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan