Summary
Successful exploitation of these vulnerabilities could disclose sensitive information, allow privilege escalation, or allow remote code execution.
Vulnerabilities 16
-
Critical 9.1
An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion …
-
High 8.1
Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting i…
-
High 8.1
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execut…
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability …
-
High 8.1
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability…
-
High 8.1
Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution…
-
High 8.1
Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution …
-
High 7.5
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by …
-
High 7.4
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in p…
-
High 7.4
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overf…
-
High 7.4
Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in pos…
-
Medium 5.9
Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. S…
-
Medium 5.9
Server information leak for the CDA Server process memory can occur when an error is generated in response to a special…
-
Medium 5.9
Server communication with a controller can lead to remote code execution using a specially crafted message from the con…
-
Medium 5.9
Controller denial of service due to improper handling of a specially crafted message received by the controller. See Ho…
-
Medium 5.3
An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion Contr…
Revision history
-
#1
Initial Publication
References
-
ICSA Advisory ICSA-24-116-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-116-04
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B