Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-23585 EUVD-2023-27685GHSA-g39f-h5w4-xhgq

Server DoS due to heap overflow

Published Jul 13, 2023 · Updated Mar 5, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: Direct Station Product: Engineering Station Product: Experion Server Product: Experion Station Category: ICS / OT

Description

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. 

See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell Experion Server 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Experion Station 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Engineering Station 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Direct Station 510.5 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References