← CVE Intelligence

CVE-2023-5390

Honeywell / ControlEdge UOC PUBLISHED

Description (CNA)

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (CNA)

Vendor / productVersions
Honeywell / ControlEdge UOCaffected 520.2 through 520.2 TCU4; affected 510.1 through 510.2 HF13; affected 520.1 through 520.1 TCU4; affected 511.1 through 511.5 TCU4 HF3
Honeywell / ControlEdge UOCaffected 520.2 through 520.2 TCU4; affected 511.1 through 511.5 TCU4 HF3; affected 520.1 through 520.1 TCU4
Honeywell / ControlEdge UOCaffected 520.2 through 520.2 TCU4; affected 520.1 through 520.1 TCU4; affected 520.2 TCU4 HFR2 through 511.5 TCU4 HF3

CWE

CWE-36

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.