Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-24480 EUVD-2023-28498GHSA-h8ch-jgjf-mm94

Controller stack overflow when decoding messages from the server

Published Jul 13, 2023 · Updated Mar 5, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: C300 Category: ICS / OT

Description

Controller DoS due to stack overflow when decoding a message from the server. 

See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell C300 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2, 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References