CVE-2023-23585 — Server DoS due to heap overflow

Description (CNA)

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (CNA)

Vendor / product	Versions
Honeywell / Experion Server	affected 501.1 through 501.6HF8; affected 510.1 through 510.2HF12; affected 511.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Experion Station	affected 501.1 through 501.6HF8; affected 510.1 through 510.2HF12; affected 511.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Engineering Station	affected 510.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Direct Station	affected 510.5 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2

CWE

CWE-787

References

https://process.honeywell.com

ADP enrichment

CVE

No English description supplied.

https://process.honeywell.com

CISA-ADP

No English description supplied.

No references supplied.