PT-2019-7132 · Honeywell · Experion Pks

Published 2019-04-08 · Updated 2019-10-09 · CVE-2014-5436

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS versions prior to R400.6 Honeywell Experion PKS versions prior to R410.6 Honeywell Experion PKS versions prior to R430.2

Description A directory traversal issue exists in the confd.exe module, potentially leading to information disclosure.

Recommendations For versions prior to R400.6, upgrade to version R400.6 or later. For versions prior to R410.6, upgrade to version R410.6 or later. For versions prior to R430.2, upgrade to version R430.2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-5436

Affected Products

Experion Pks

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5436 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01 · Note