honeywell Engineering Station Vulnerabilities

Honeywell Engineering Station vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

13 July 2023

Server Data type confusion - info leak
CVE-2023-25948
HoneywellExperion Server7.5HIGH
Server bad parsing implementation - stack overflow in server::get_db_path_for_driver
CVE-2023-22435
HoneywellExperion Server7.5HIGH
Server DoS due to heap overflow
CVE-2023-23585
HoneywellExperion Server9.8CRITICAL
Server deserialization missing boundary checks - heap overflow in communication between server and controller
CVE-2023-24474
HoneywellExperion Server7.5HIGH
DoS due to heap overflow
CVE-2023-25078
HoneywellExperion Server9.8CRITICAL

No more vulnerabilities to load.