ES
Product
Experion Server
by Honeywell · last CVE Apr 17, 2024
17
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 3Low 0
Watch

Add Experion Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5404
8.1
1%
Apr 17
Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5403
8.1
1%
Apr 17
Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5401
8.1
1%
Apr 17
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5400
8.1
1%
Apr 17
Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5397
8.1
1%
Apr 17
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5395
8.1
1%
Apr 17
Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-25948
7.5
1%
Jul 13
Server Data type confusion - info leak
Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2
CVE-2023-25078
7.5
1%
Jul 13
DoS due to heap overflow
Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2
CVE-2023-24474
7.5
1%
Jul 13
Server deserialization missing boundary checks - heap overflow in communication between server and controller
Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2
CVE-2023-23585
7.5
1%
Jul 13
Server DoS due to heap overflow
Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2
CVE-2023-22435
7.5
1%
Jul 13
Server bad parsing implementation - stack overflow in server::get_db_path_for_driver
Affected: 501.1 through 501.6HF8; 510.1 through 510.2HF12; 511.1 through 511.5TCU3; 520.1 through 520.1TCU4; 520.2 through 520.2TCU2
CVE-2023-5396
7.4
1%
Apr 17
Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5394
7.4
1%
Apr 11
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell…
Affected: 520.2 through 520.2 TCU4; 510.1 through 510.2 HF13; 520.1 through 520.1 TCU4; 511.1 through 511.5 TCU4 HF3; 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; +4 more
CVE-2023-5393
7.4
1%
Apr 11
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution
Affected: 520.2 through 520.2 TCU4; 511.1 through 511.5 TCU4 HF3; 520.1 through 520.1 TCU4; 520.2 through 520.2 TCU4; 520.1 through 520.1 TCU4; 520.2 TCU4 HFR2 through 511.5 TCU4 HF3
Showing 14