CVE-2023-24474 — Server deserialization missing boundary checks - heap overflow in communication between server and controller

Description (CNA)

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

Vendor / product	Versions
Honeywell / Experion Server	affected 501.1 through 501.6HF8; affected 510.1 through 510.2HF12; affected 511.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Experion Station	affected 501.1 through 501.6HF8; affected 510.1 through 510.2HF12; affected 511.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Engineering Station	affected 510.1 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2
Honeywell / Direct Station	affected 510.5 through 511.5TCU3; affected 520.1 through 520.1TCU4; affected 520.2 through 520.2TCU2

CWE-122

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.