Skip to content
OpenAdvisories
High · 7.5 CVE-2023-24474 EUVD-2023-28492GHSA-rm26-gpm4-m74x

Server deserialization missing boundary checks - heap overflow in communication between server and controller

Published Jul 13, 2023 · Updated Nov 12, 2024 · Assigned by Honeywell

Vendor: Honeywell Product: Direct Station Product: Engineering Station Product: Experion Server Product: Experion Station Category: ICS / OT

Description

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

Affected products

VendorProductAffectedFixed
Honeywell Experion Server 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Experion Station 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Engineering Station 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —
Honeywell Direct Station 510.5 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References