Honeywell Experion Server

• CVE-2023-5406 Medium 5.9 Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and 0.7%
• CVE-2023-5405 Medium 5.9 Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on up 0.4%
• CVE-2023-5404 High 8.1 Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading 0.7%
• CVE-2023-5403 High 8.1 Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations o 0.7%
• CVE-2023-5401 High 8.1 Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a fa 0.7%
• CVE-2023-5400 High 8.1 Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a fai 0.7%
• CVE-2023-5398 Medium 5.9 Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versionin 0.4%
• CVE-2023-5397 High 8.1 Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations 0.8%
• CVE-2023-5396 High 7.4 Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendati 0.7%
• CVE-2023-5395 High 8.1 Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recomme 0.7%
• CVE-2023-5394 High 7.4 Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating t 0.7%
• CVE-2023-5393 High 7.4 Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent v 0.7%
• CVE-2023-25948 High 7.5 Server Data type confusion - info leak 0.6%
• CVE-2023-25078 Critical 9.8 DoS due to heap overflow 0.7%
• CVE-2023-24474 High 7.5 Server deserialization missing boundary checks - heap overflow in communication between server and controller 0.7%
• CVE-2023-23585 Critical 9.8 Server DoS due to heap overflow 0.7%
• CVE-2023-22435 High 7.5 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver 0.6%