Skip to contentHoneywell Experion vulnerabilities
- honeywell experion serverServer communication with a controller can lead to remote code execution using a specially...CVE-2023-54065.9 Medium
- honeywell experion serverServer information leak for the CDA Server process memory can occur when an error is generated in...CVE-2023-54055.9 Medium
- honeywell experion serverServer receiving a malformed message can cause a pointer to be overwritten which can result in a...CVE-2023-54048.1 High
- honeywell experion serverServer hostname translation to IP address manipulation which could lead to an attacker performing...CVE-2023-54038.1 High
- honeywell experion serverServer receiving a malformed message based on a using the specified key values can cause a stack...CVE-2023-54018.1 High
- honeywell experion serverServer receiving a malformed message based on a using the specified key values can cause a heap...CVE-2023-54008.1 High
- honeywell experion serverServer receiving a malformed message based on a list of IPs resulting in heap corruption causing...CVE-2023-53985.9 Medium
- honeywell experion serverServer receiving a malformed message to create a new connection could lead to an attacker...CVE-2023-53978.1 High
- honeywell experion serverServer receiving a malformed message creates connection for a hostname that may cause a stack...CVE-2023-53967.4 High
- honeywell experion serverServer receiving a malformed message that uses the hostname in an internal table may cause a...CVE-2023-53958.1 High
- honeywell experion server, experion lx, experion process knowledge system +1 more +3 moreServer receiving a malformed message that where the GCL message hostname may be too large which...CVE-2023-53947.4 High
- honeywell experion serverServer receiving a malformed message that causes a disconnect to a hostname may causing a stack...CVE-2023-53937.4 High
- honeywell direct station, engineering station, experion server +1 more +3 moreServer Data type confusion - info leakCVE-2023-259487.5 High
- honeywell direct station, engineering station, experion server +1 more +3 moreDoS due to heap overflowCVE-2023-250789.8 Critical
- honeywell experion server, direct station, engineering station +1 more +3 moreServer deserialization missing boundary checks - heap overflow in communication between server and controllerCVE-2023-244747.5 High
- honeywell experion server, direct station, engineering station +1 more +3 moreServer DoS due to heap overflowCVE-2023-235859.8 Critical
- honeywell experion server, direct station, engineering station +1 more +3 moreServer bad parsing implementation - stack overflow in server::get_db_path_for_driverCVE-2023-224357.5 High
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous TypeCVE-2021-3839710.0 Critical
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers InjectionCVE-2021-383959.1 Critical
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers Relative Path TraversalCVE-2021-383997.5 High
- honeywell experion lx firmwareHoneywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function....CVE-2022-303179.1 Critical
- honeywell experion pks, experion process knowledge system +1 moreAn arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion...CVE-2014-54359.8 Critical
- honeywell experion pks, experion process knowledge system +1 moreA directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x...CVE-2014-54367.5 High
- honeywell experion pks, experion process knowledge system +1 moreA file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x...CVE-2014-91869.8 Critical
- honeywell experion pks, experion process knowledge system +1 moreMultiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions...CVE-2014-91879.8 Critical
- honeywell experion pks, experion process knowledge system +1 moreMultiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all...CVE-2014-91899.8 Critical
- honeywell experion process knowledge systemAn issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion...CVE-2016-83443.7 Low
- honeywell enterprise building manager, experion, symmetre +2 moreStack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell...CVE-2012-02547.5 High