Vulnerability · Published Jul 13, 2023 · Assigned by Honeywell

CVE-2023-25178Controller design flaw - unsigned firmware

Critical 9.8

In plain English

A critical-severity insufficient verification of data authenticity in C300 from Honeywell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.5%top 55.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products (as reported)

Vendor	Product	Versions
Honeywell	C300	501.1 – through 501.6HF8510.1 – through 510.2HF12511.1 – through 511.5TCU3520.1 – through 520.1TCU4520.2 – through 520.2TCU2
Honeywell	C300	510.1 – through 511.5TCU3520.1 – through 520.1TCU4520.2 – through 520.2TCU2

Weakness: CWE-345 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://process.honeywell.com