Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-38397 EUVD-2021-24849GHSA-j77h-24p8-j3g2

Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type

Published Oct 28, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

Affected products

VendorProductAffectedFixed
Honeywell Experion PKS C200, C200E, C300, ACE controllers —

Advisories 1

References