PT-2024-14793 · Honeywell · Honeywell

Published 2024-04-11 · Updated 2024-04-26 · CVE-2023-5393

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Honeywell product (affected versions not specified)

Description The issue occurs when a server receives a malformed message that causes a disconnect to a hostname, potentially leading to a stack overflow and possible remote code execution.

Recommendations Update to the most recent version of the product, following the recommendations provided in the Honeywell Security Notification for upgrading and versioning.

Fix

Weakness Enumeration

CWE-130

Related Identifiers

CVE-2023-5393

Affected Products

Honeywell

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-5393 · Security Note
• https://process.honeywell.com · Note
• https://t.me/cvenotify/76554 · Telegram Post
• https://t.me/cvenotify/77943 · Telegram Post
• https://twitter.com/bluepatch0404/status/1783882013885510084 · Twitter Post