Server Information Leak Due to Error Handling Vulnerability
CVE-2023-5405
5.9MEDIUM
What is CVE-2023-5405?
A vulnerability exists in the CDA Server where an error triggered by a specially crafted message can lead to the leakage of sensitive server information from the process memory. This issue can allow unauthorized parties to access confidential data, posing significant risks to security and privacy. It is advisable to review Honeywell's security advisory for effective mitigation steps, including recommended upgrades and version management.
Affected Version(s)
Experion Server Experion LX 520.2 <= 520.2 TCU4
Experion Server Experion LX 511.1 <= 511.5 TCU4 HF3
Experion Server Experion LX 520.1 <= 520.1 TCU4