ES
Product
Experion Server
17
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 3Low 0
Watch
Add Experion Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5404 | 8.1 | Apr 17 | Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5403 | 8.1 | Apr 17 | Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5401 | 8.1 | Apr 17 | Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5400 | 8.1 | Apr 17 | Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5397 | 8.1 | Apr 17 | Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5395 | 8.1 | Apr 17 | Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-25948 | 7.5 | Jul 13 | Server Data type confusion - info leak Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2 |
| CVE-2023-25078 | 7.5 | Jul 13 | DoS due to heap overflow Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2 |
| CVE-2023-24474 | 7.5 | Jul 13 | Server deserialization missing boundary checks - heap overflow in communication between server and controller Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2 |
| CVE-2023-23585 | 7.5 | Jul 13 | Server DoS due to heap overflow Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2 |
| CVE-2023-22435 | 7.5 | Jul 13 | Server bad parsing implementation - stack overflow in server::get_db_path_for_driver Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2 |
| CVE-2023-5396 | 7.4 | Apr 17 | Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5394 | 7.4 | Apr 11 | Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell… Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more |
| CVE-2023-5393 | 7.4 | Apr 11 | Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution Affected: 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; 520.1 through 520.1 TCU4; 520.2 through 520.2 TCU4; 520.1 through 520.1 TCU4; 520.2 TCU4 HFR2 through 511.5 TCU4 HF3 |
Showing 14
