critical10.0
CVE-2021-38397
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbi…
Impact
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | C200 Firmware | All versions |
| Honeywell | C200e Firmware | All versions |
| Honeywell | C300 Firmware | All versions |
| Honeywell | Application Control Environment Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
- https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
- https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf