Malformed Message May Cause Stack Overflow and Remote Code Execution

CVE-2023-5395

What is CVE-2023-5395?

A vulnerability exists in Honeywell Process Solutions where the server's handling of malformed messages can result in a stack overflow. This flaw occurs when an attacker sends a crafted message utilizing an internal hostname reference, potentially allowing for remote code execution. Honeywell has advised users to upgrade to the latest versions to mitigate this security risk and enhance protection against such exploitation attempts.

References