Malformed Message Could Lead to Remote Code Execution
CVE-2023-5396
7.4HIGH
What is CVE-2023-5396?
A vulnerability exists in specific Honeywell products where the server's handling of a malformed message can lead to a stack overflow. This issue allows an attacker to create a connection for an arbitrary hostname, potentially leading to remote code execution. For specific mitigations and guidance, refer to the Honeywell Security Notification, which recommends updating to secure versions.
Affected Version(s)
Experion Server Experion LX 520.2 <= 520.2 TCU4
Experion Server Experion LX 511.1 <= 511.5 TCU4 HF3
Experion Server Experion LX 520.1 <= 520.1 TCU4