CVE-2023-24474
13.07.2023, 11:15
Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted messageEnginsight
| Vendor | Product | Version |
|---|---|---|
| honeywell | experion_server | 501.1 ≤ 𝑥 ≤ 501.6hf8 |
| honeywell | experion_server | 510.1 ≤ 𝑥 ≤ 510.2hf12 |
| honeywell | experion_server | 511.1 ≤ 𝑥 ≤ 511.5tcu3 |
| honeywell | experion_server | 520.1 ≤ 𝑥 ≤ 520.1tcu4 |
| honeywell | experion_server | 520.2 ≤ 𝑥 ≤ 520.2tcu2 |
| honeywell | experion_station | 501.1 ≤ 𝑥 ≤ 501.6hf8 |
| honeywell | experion_station | 510.1 ≤ 𝑥 ≤ 510.2hf12 |
| honeywell | experion_station | 511.1 ≤ 𝑥 ≤ 511.5tcu3 |
| honeywell | experion_station | 520.1 ≤ 𝑥 ≤ 520.1tcu4 |
| honeywell | experion_station | 520.2 ≤ 𝑥 ≤ 520.2tcu2 |
| honeywell | engineering_station | 510.1 ≤ 𝑥 ≤ 511.5tcu3 |
| honeywell | engineering_station | 520.1 ≤ 𝑥 ≤ 520.1tcu4 |
| honeywell | engineering_station | 520.2 ≤ 𝑥 ≤ 520.2tcu2 |
| honeywell | direct_station | 510.1 ≤ 𝑥 ≤ 511.5tcu3 |
| honeywell | direct_station | 520.1 ≤ 𝑥 ≤ 520.1tcu4 |
| honeywell | direct_station | 520.2 ≤ 𝑥 ≤ 520.2tcu2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.