CVE-2023-22435 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Honeywell	CNA	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 16%

Vendor	Product	Version
honeywell	experion_server	501.1 ≤ 𝑥 ≤ 501.6hf8
honeywell	experion_server	510.1 ≤ 𝑥 ≤ 510.2hf12
honeywell	experion_server	511.1 ≤ 𝑥 ≤ 511.5tcu3
honeywell	experion_server	520.1 ≤ 𝑥 ≤ 520.1tcu4
honeywell	experion_server	520.2 ≤ 𝑥 ≤ 520.2tcu2
honeywell	experion_station	501.1 ≤ 𝑥 ≤ 501.6hf8
honeywell	experion_station	510.1 ≤ 𝑥 ≤ 510.2hf12
honeywell	experion_station	511.1 ≤ 𝑥 ≤ 511.5tcu3
honeywell	experion_station	520.1 ≤ 𝑥 ≤ 520.1tcu4
honeywell	experion_station	520.2 ≤ 𝑥 ≤ 520.2tcu2
honeywell	engineering_station	510.1 ≤ 𝑥 ≤ 511.5tcu3
honeywell	engineering_station	520.1 ≤ 𝑥 ≤ 520.1tcu4
honeywell	engineering_station	520.2 ≤ 𝑥 ≤ 520.2tcu2
honeywell	direct_station	510.1 ≤ 𝑥 ≤ 511.5tcu3
honeywell	direct_station	520.1 ≤ 𝑥 ≤ 520.1tcu4
honeywell	direct_station	520.2 ≤ 𝑥 ≤ 520.2tcu2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-697 - Incorrect Comparison
The software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.
CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

References

https://process.honeywell.com

https://process.honeywell.com