CVE-2023-5392highCWE-1295

CVE-2023-5392: high-severity vulnerability in Honeywell C300

Published · Updated

Follow this CVE+ Monitor C300

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Honeywell · C300
Related CVEs — Honeywell C300

In the same product, most dangerous first.

CVE-2023-24480CRITICALController stack overflow when decoding messages from the serverEPSS 0.7%CVE-2023-25770CRITICALController stack overflow on decoding messages from the serverEPSS 0.7%CVE-2023-26597HIGHController DOS on sending error responseEPSS 0.6%CVE-2023-25178CRITICALController design flaw - unsigned firmwareEPSS 0.5%CVE-2023-5407MEDIUMCVE-2023-5407EPSS 0.4%