Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25770 EUVD-2023-29667GHSA-x9p9-9r24-pqg9

Controller stack overflow on decoding messages from the server

Published Jul 13, 2023 · Updated Aug 2, 2024 · Assigned by Honeywell

Description

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell C300 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2, 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References