Honeywell C300

• CVE-2023-5407 Medium 5.9 Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. 0.4%
• CVE-2023-5392 High 7.5 C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the pro 0.5%
• CVE-2023-26597 High 7.5 Controller DOS on sending error response 0.6%
• CVE-2023-25770 Critical 9.8 Controller stack overflow on decoding messages from the server 0.7%
• CVE-2023-25178 Critical 9.8 Controller design flaw - unsigned firmware 0.5%
• CVE-2023-24480 Critical 9.8 Controller stack overflow when decoding messages from the server 0.7%