NetSight
critical9.8

CVE-2023-25078

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.

Impact

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffected versions
HoneywellExperion Server
from 501.1 through 501.6hf8
from 510.1 through 510.2hf12
from 511.1 through 511.5tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellExperion Station
from 501.1 through 501.6hf8
from 510.1 through 510.2hf12
from 511.1 through 511.5tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellEngineering Station
from 510.1 through 511.tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellDirect Station
from 510.1 through 511.tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2

Weakness classification

References