Honeywell Experion PKS, LX and PlantCruise
Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow privilege escalation or allow remote code execution.
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-26597US | high7.5 | — | ||
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgradin… | ||||
| CVE-2023-25948US | high7.5 | — | ||
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgr… | ||||
| CVE-2023-25770US | high7.5 | — | ||
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on up… | ||||
| CVE-2023-25178US | critical9.8OT erhöht | — | ||
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
| ||||
| CVE-2023-25078US | high7.5 | — | ||
Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.
See Honeywell Security Not… | ||||
| CVE-2023-24480US | high7.5 | — | ||
Controller DoS due to stack overflow when decoding a message from the server.
See Honeywell Security Notification for recommendations on upgrading and versioning.
| ||||
| CVE-2023-24474US | high7.5 | — | ||
Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message | ||||
| CVE-2023-23585US | high7.5 | — | ||
Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.
See Honeywell Security Notification… | ||||
| CVE-2023-22435US | high7.5 | — | ||
Experion server may experience a DoS due to a stack overflow when handling a specially crafted message. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-194-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-194-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (54)
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion LX
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PKS
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- MitigationExperion PlantCruise
Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion LX
Experion LX: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PKS
Experion PKS: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
- BehobenExperion PlantCruise
Experion PlantCruise: Update to version R520.2
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan