Honeywell Experion PKS (Update A)
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3947US | — | — | ||
The Honeywell Experion PKS contains an Integer Underflow
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, lea… | ||||
| CVE-2025-3946US | — | — | ||
The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA). An attacker could potential… | ||||
| CVE-2025-2523US | — | — | ||
The Honeywell Experion PKS
and OneWireless WDM
contains an Integer Underflow
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploi… | ||||
| CVE-2025-2522US | — | — | ||
The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially… | ||||
| CVE-2025-2521US | — | — | ||
The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnera… | ||||
| CVE-2025-2520US | — | — | ||
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, l… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-205-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-205-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025 - FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025 - FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025 - FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025 - FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025 - FixedExperion PKS
Honeywell recommends updating Experion PKS R520.2 TCU9 Hot Fix 1 or R530 TCU3 Hot Fix 1. For more information, see the Security Notice.
https://process.honeywell.com/us/en/support/technical-publication?search=SN2025
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan