ICSA-14-352-01

Honeywell Experion PKS Vulnerabilities

view advisory published 2014-09-20

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2014-9186US	critical9.8	3.65% (90th)	—	2019-04-08
A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to acceptin…
CVE-2014-5436US	high7.5	3.12% (88th)	—	2019-04-08
A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to pos…
CVE-2014-5435US	critical9.8	3.46% (89th)	—	2019-04-08
An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lea…
CVE-2014-9189US	critical9.8	5.23% (92nd)	—	2019-03-25
Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430…
CVE-2014-9187US	critical9.8	3.62% (89th)	—	2019-03-25
Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 mod…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-14-352-01 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-14-352-01 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (15)

MitigationExperion PKS R40x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R40x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R40x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R40x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R40x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R41x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R41x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R41x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R41x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R41x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R43x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R43x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R43x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R43x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2
MitigationExperion PKS R43x
Available patches that resolve the vulnerabilities are listed below: Software Downloads: Experion Update Patch R400.6, Experion Update Patch R410.6, Experion Update Patch R430.2

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan