CVE-2023-24474

Summary

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

Affected Software

VendorProductVersion RangeStatus
HoneywellExperion Server501.1 <= 501.6HF8affected
HoneywellExperion Server510.1 <= 510.2HF12affected
HoneywellExperion Server511.1 <= 511.5TCU3affected
HoneywellExperion Server520.1 <= 520.1TCU4affected
HoneywellExperion Server520.2 <= 520.2TCU2affected
HoneywellExperion Station501.1 <= 501.6HF8affected
HoneywellExperion Station510.1 <= 510.2HF12affected
HoneywellExperion Station511.1 <= 511.5TCU3affected
HoneywellExperion Station520.1 <= 520.1TCU4affected
HoneywellExperion Station520.2 <= 520.2TCU2affected
HoneywellEngineering Station510.1 <= 511.5TCU3affected
HoneywellEngineering Station520.1 <= 520.1TCU4affected
HoneywellEngineering Station520.2 <= 520.2TCU2affected
HoneywellDirect Station510.5 <= 511.5TCU3affected
HoneywellDirect Station520.1 <= 520.1TCU4affected
HoneywellDirect Station520.2 <= 520.2TCU2affected

Weaknesses

  • CWE-122: CWE-122: Heap-based Buffer Overflow

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References