Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-5405 EUVD-2023-57720GHSA-38mp-fjx9-rc96

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. …

Published Apr 17, 2024 · Updated Feb 6, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: Experion Server Category: ICS / OT

Description

Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell Experion Server 520.2 – ≤ 520.2 TCU4, 510.1 – ≤ 510.2 HF13, 520.1 – ≤ 520.1 TCU4, 511.1 – ≤ 511.5 TCU4 HF3, 520.2 – ≤ 520.2 TCU4, 511.1 – ≤ 511.5 TCU4 HF3, 520.1 – ≤ 520.1 TCU4, 520.2 – ≤ 520.2 TCU4, 520.1 – ≤ 520.1 TCU4, 520.2 TCU4 HFR2 – ≤ 511.5 TCU4 HF3 —

Advisories 1

References