← CVE Intelligence

CVE-2023-5395

Honeywell / Experion Server PUBLISHED

Description (CNA)

Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (CNA)

Vendor / productVersions
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 510.1 through 510.2 HF13; affected 520.1 through 520.1 TCU4; affected 511.1 through 511.5 TCU4 HF3
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 511.1 through 511.5 TCU4 HF3; affected 520.1 through 520.1 TCU4
Honeywell / Experion Serveraffected 520.2 through 520.2 TCU4; affected 520.1 through 520.1 TCU4; affected 520.2 TCU4 HFR2 through 511.5 TCU4 HF3

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.