PT-2019-7151 · Honeywell · Honeywell Experion Pks

Publicado 2019-03-25 · Atualizado 2019-10-09 · CVE-2014-9187

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS versions prior to R400.6 Honeywell Experion PKS versions prior to R410.6 Honeywell Experion PKS versions prior to R430.2

Description The issue is related to multiple heap-based buffer overflow vulnerabilities. These vulnerabilities could potentially lead to remote code execution or denial of service.

Recommendations For versions prior to R400.6, upgrade to a supported version. For versions prior to R410.6, upgrade to a supported version. For versions prior to R430.2, upgrade to a supported version.

Correção

Buffer Overflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-122

Identificadores relacionados

CVE-2014-9187

Produtos afetados

Honeywell Experion Pks

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9187 · Nota de Segurança