Skip to content
OpenAdvisories
High · 7.5 CVE-2023-26597 EUVD-2023-30392GHSA-mxwr-w7j9-6428

Controller DOS on sending error response

Published Jul 13, 2023 · Updated Mar 5, 2025 · Assigned by Honeywell

Description

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell C300 501.1 – ≤ 501.6HF8, 510.1 – ≤ 510.2HF12, 511.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2, 510.1 – ≤ 511.5TCU3, 520.1 – ≤ 520.1TCU4, 520.2 – ≤ 520.2TCU2 —

Advisories 1

References