critical9.8
CVE-2023-25178
Controller may be loaded with malicious firmware which could enable remote code execution.
Impact
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | C300 Firmware | from 501.1 through 501.6hf8 from 510.1 through 510.2hf12 from 511.1 through 511.5tcu3 from 520.1 through 520.1tcu4 from 520.2 through 520.2tcu2 |