Malformed Messages Can Cause Pointer Overwrite and Remote Code Execution

CVE-2023-5404

What is CVE-2023-5404?

A vulnerability exists in Honeywell Industrial Control Systems where the server's response to a malformed message can lead to pointer overwriting. This flaw potentially enables attackers to execute arbitrary code remotely or cause system failures. Honeywell has issued security recommendations for affected products, emphasizing the importance of updating to secure versions to mitigate associated risks.

References