CVE-2023-5397
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Honeywell | Experion Server | 520.2 <= 520.2 TCU4 | affected |
| Honeywell | Experion Server | 510.1 <= 510.2 HF13 | affected |
| Honeywell | Experion Server | 520.1 <= 520.1 TCU4 | affected |
| Honeywell | Experion Server | 511.1 <= 511.5 TCU4 HF3 | affected |
| Honeywell | Experion Server | 520.2 <= 520.2 TCU4 | affected |
| Honeywell | Experion Server | 511.1 <= 511.5 TCU4 HF3 | affected |
| Honeywell | Experion Server | 520.1 <= 520.1 TCU4 | affected |
| Honeywell | Experion Server | 520.2 <= 520.2 TCU4 | affected |
| Honeywell | Experion Server | 520.1 <= 520.1 TCU4 | affected |
| Honeywell | Experion Server | 520.2 TCU4 HFR2 <= 511.5 TCU4 HF3 | affected |
Weaknesses
- CWE-20: CWE-20
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.