CVE-2023-25078criticalCWE-787

CVE-2023-25078: falha crítica em Honeywell Direct Station

DoS due to heap overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Experion Server+ Monitorar Direct Station

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.7%
Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security Notification for recommendations on upgrading and versioning.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Honeywell · Direct StationHoneywell · Engineering StationHoneywell · Experion ServerHoneywell · Experion Station
CVEs relacionadas — Honeywell Direct Station

No mesmo produto, das mais perigosas para as menos.

CVE-2023-5397HIGHCVE-2023-5397EPSS 0.8%CVE-2023-5401HIGHCVE-2023-5401EPSS 0.7%CVE-2023-5400HIGHCVE-2023-5400EPSS 0.7%CVE-2023-5395HIGHCVE-2023-5395EPSS 0.7%CVE-2023-5404HIGHCVE-2023-5404EPSS 0.7%CVE-2023-5403HIGHCVE-2023-5403EPSS 0.7%