Description
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Honeywell | Experion Server | 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 | — |
| Honeywell | Experion Station | 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 | — |
| Honeywell | Engineering Station | 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 | — |
| Honeywell | Direct Station | 510.5 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 | — |
Advisories 1
- ICSA-23-194-06 Honeywell Experion PKS, LX and PlantCruise CISA ICS & IT advisories · Jul 13, 2023