NetSight
high7.5

CVE-2023-25948

Server information leak of configuration data when an error is generated in response to a specially crafted message.

Impact

Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffected versions
HoneywellExperion Server
from 501.1 through 501.6hf8
from 510.1 through 510.2hf12
from 511.1 through 511.5tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellExperion Station
from 501.1 through 501.6hf8
from 510.1 through 510.2hf12
from 511.1 through 511.5tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellEngineering Station
from 510.1 through 511.tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2
HoneywellDirect Station
from 510.1 through 511.tcu3
from 520.1 through 520.1tcu4
from 520.2 through 520.2tcu2

Weakness classification

References