PT-2019-7131 · Honeywell · Honeywell Experion Pks

Publicado 2019-04-08 · Atualizado 2019-10-09 · CVE-2014-5435

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS versions prior to R400.6 Honeywell Experion PKS versions prior to R410.6 Honeywell Experion PKS versions prior to R430.2

Description An arbitrary memory write issue exists in the dual onsrv.exe module that could lead to possible remote code execution or denial of service.

Recommendations For versions prior to R400.6, upgrade to version R400.6 or later. For versions prior to R410.6, upgrade to version R410.6 or later. For versions prior to R430.2, upgrade to version R430.2 or later.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-123

CWE-787

Identificadores relacionados

CVE-2014-5435

Produtos afetados

Honeywell Experion Pks

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5435 · Nota de Segurança