Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-5407 EUVD-2023-57722GHSA-qppc-rv3c-f6g6

Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Not…

Published Apr 17, 2024 · Updated Aug 8, 2024 · Assigned by Honeywell

Description

Controller denial of service due to improper handling of a specially crafted message received by the controller.

See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

VendorProductAffectedFixed
Honeywell C300 520.2 – ≤ 520.2 TCU4, 510.1 – ≤ 510.2 HF13, 520.1 – ≤ 520.1 TCU4, 511.1 – ≤ 511.5 TCU4 HF3, 520.2 – ≤ 520.2 TCU4, 511.1 – ≤ 511.5 TCU4 HF3, 520.1 – ≤ 520.1 TCU4, 520.2 – ≤ 520.2 TCU4, 520.1 – ≤ 520.1 TCU4, 520.2 TCU4 HFR2 – ≤ 511.5 TCU4 HF3 —

Advisories 1

References