PT-2023-3877 · Honeywell · Honeywell Experion Pks+2

Published

2023-07-13

·

Updated

2025-08-28

·

CVE-2023-25078

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS (affected versions not specified) Honeywell Experion LX (affected versions not specified) Experion PlantCruise (affected versions not specified)
Description The issue is related to a heap overflow occurring during the handling of a specially crafted message for a specific configuration operation, which can cause a Denial of Service (DoS) in the Server or Console Station. This can be exploited by a remote attacker to potentially execute arbitrary code.
Recommendations For Honeywell Experion PKS, consider upgrading to a newer version as recommended by Honeywell Security Notification. For Honeywell Experion LX, consider upgrading to a newer version as recommended by Honeywell Security Notification. For Experion PlantCruise, consider upgrading to a newer version as recommended by Honeywell Security Notification. As a temporary workaround, consider restricting access to the configuration operation that handles specially crafted messages until a patch is available.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121CWE-787

Related Identifiers

BDU:2023-04169
CVE-2023-25078

Affected Products

Experion Plantcruise
Honeywell Experion Lx
Honeywell Experion Pks