PT-2019-7152 · Honeywell · Honeywell Experion Pks

Published 2019-03-25 · Updated 2019-10-09 · CVE-2014-9189

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS versions prior to R400.6 Honeywell Experion PKS versions prior to R410.6 Honeywell Experion PKS versions prior to R430.2

Description Multiple stack-based buffer overflow issues were found in Honeywell Experion PKS that could lead to possible remote code execution, dynamic memory corruption, or denial of service.

Recommendations For versions prior to R400.6, upgrade to a supported version. For versions prior to R410.6, upgrade to a supported version. For versions prior to R430.2, upgrade to a supported version.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2014-9189

Affected Products

Honeywell Experion Pks

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-9189 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01 · Note