C300 Information Leak Due to Analysis Feature

CVE-2023-5392

What is CVE-2023-5392?

The vulnerability impacting Honeywell's C300 product involves an exploitable information leak due to an analysis feature that permits an excess amount of memory extraction over the network beyond what is intended. This flaw can pose risks to sensitive data integrity and confidentiality. To mitigate this issue, it is urged for users to update to the latest product version, as recommended by Honeywell Security Notification, which provides detailed guidance on upgrading and addressing this vulnerability effectively.

References