CF
Product
C300 Firmware
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 0Low 0
Watch
Add C300 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38397 | 10.0 | Oct 28 | Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type Affected: All versions, or not specified |
| CVE-2023-25178 | 9.8 | Jul 13 | Controller design flaw - unsigned firmware Affected: 501.1 through 501.6hf8; 510.1 through 510.2hf12; 511.1 through 511.5tcu3; 520.1 through 520.1tcu4; 520.2 through 520.2tcu2 |
| CVE-2021-38395 | 9.8 | Oct 28 | Honeywell Experion PKS and ACE Controllers Injection Affected: All versions, or not specified |
| CVE-2023-26597 | 7.5 | Jul 13 | Controller DOS on sending error response Affected: 501.1 through 501.6hf8; 510.1 through 510.2hf12; 511.1 through 511.5tcu3; 520.1 through 520.1tcu4; 520.2 through 520.2tcu2 |
| CVE-2023-25770 | 7.5 | Jul 13 | Controller stack overflow on decoding messages from the server Affected: 501.1 through 501.6hf8; 510.1 through 510.2hf12; 511.1 through 511.5tcu3; 520.1 through 520.1tcu4; 520.2 through 520.2tcu2 |
| CVE-2023-24480 | 7.5 | Jul 13 | Controller stack overflow when decoding messages from the server Affected: 501.1 through 501.6hf8; 510.1 through 510.2hf12; 511.1 through 511.5tcu3; 520.1 through 520.1tcu4; 520.2 through 520.2tcu2 |
| CVE-2021-38399 | 7.5 | Oct 28 | Honeywell Experion PKS and ACE Controllers Relative Path Traversal Affected: All versions, or not specified |
Showing 7
