high7.5
CVE-2021-38399
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized fil…
Impact
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | C200 Firmware | All versions |
| Honeywell | C200e Firmware | All versions |
| Honeywell | C300 Firmware | All versions |
| Honeywell | Application Control Environment Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
- https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
- https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf