Description
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Honeywell | C300 | 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2, 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 | — |
Advisories 1
- ICSA-23-194-06 Honeywell Experion PKS, LX and PlantCruise CISA ICS & IT advisories · Jul 13, 2023