Critical severity · published Jul 13, 2023
CVE-2023-25178
Controller design flaw - unsigned firmware
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C3
C300 · Honeywell
501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2; 510.1 through 511.5TCU3; +2 more · source: vendor
CF
C300 Firmware · Honeywell
501.1 through 501.6hf8; 510.1 through 510.2hf12; 511.1 through 511.5tcu3; 520.1 through 520.1tcu4; 520.2 through 520.2tcu2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-25178
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-25178
Product
https://process.honeywell.com
More from C300
7.5
CVE-2023-5392
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most…
7.5
CVE-2023-26597
Controller DOS on sending error response
7.5
CVE-2023-25770
Controller stack overflow on decoding messages from the server
7.5
CVE-2023-24480
Controller stack overflow when decoding messages from the server
5.9
CVE-2023-5407
Controller denial of service due to improper handling of a specially crafted message received by the controller