Experion Process Knowledge System vulnerabilities | LiveThreat CVE Feed

Product

Experion Process Knowledge System

by Honeywell · last CVE Apr 11, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 4High 2Medium 0Low 1

Severity

All severities7 Critical4 High2 Medium0 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Experion Process Knowledge System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-9186	9.8	4%	Apr 8	A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to… Affected: r400 before r400.6; r410 before r410.6; r430 before r430.2
CVE-2014-5435	9.8	3%	Apr 8	An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could… Affected: r400 before r400.6; r410 before r410.6; r430 before r430.2
CVE-2014-9189	9.8	5%	Mar 25	Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to… Affected: r400 before r400.6; r410 before r410.6; r430 before r430.2
CVE-2014-9187	9.8	4%	Mar 25	Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2… Affected: r400 before r400.6; r410 before r410.6; r430 before r430.2
CVE-2014-5436	7.5	3%	Apr 8	A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to… Affected: r400 before r400.6; r410 before r410.6; r430 before r430.2
CVE-2023-5394	7.4	1%	Apr 11	Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3
CVE-2016-8344	3.7	2%	Feb 13	An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410,… Affected: through 311; 410; 430; 431; through 411