Heap Overflow Vulnerability in Honeywell Security Notification Could Lead to Remote Code Execution or Failure

CVE-2023-5400

What is CVE-2023-5400?

A vulnerability exists within certain Honeywell Industrial Control Systems that can be exploited through a malformed message targeting specific key values. This heap overflow condition may permit an unauthorized attacker to execute remote code or create system failures. Organizations utilizing affected versions are urged to review the security notifications issued by Honeywell and apply the necessary upgrades and remediation measures to secure their systems.

References