← CVE Intelligence

CVE-2023-5394

Honeywell / Experion Server PUBLISHED

Description (CNA)

Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (CNA)

Vendor / productVersions
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 510.1 through 510.2 HF13; affected 520.1 through 520.1 TCU4; affected 511.1 through 511.5 TCU4 HF3
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 511.1 through 511.5 TCU4 HF3; affected 520.1 through 520.1 TCU4
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 520.1 through 520.1 TCU4; affected 520.2 TCU4 HFR2 through 511.5 TCU4 HF3

CWE

CWE-119

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.