Skip to content
OpenAdvisories
High · 7.5 CVE-2023-22435 EUVD-2023-26597GHSA-v5xv-65gp-7j3w

Server bad parsing implementation - stack overflow in server::get_db_path_for_driver

Published Jul 13, 2023 · Updated Mar 5, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: Direct Station Product: Engineering Station Product: Experion Server Product: Experion Station Category: ICS / OT

Description

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

Affected products

VendorProductAffectedFixed
Honeywell Experion Server 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Experion Station 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Engineering Station 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Direct Station 510.5 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References