← Back

CVE-2023-25178

nvd nist
Published: Jul 13, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (5)

Honeywell
1 product
C300 Firmware
Configuration A
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honeywell
C300 Firmware
From 501.1 to 501.6hf8
C300 Firmware
From 510.1 to 510.2hf12
C300 Firmware
From 511.1 to 511.5tcu3
C300 Firmware
From 520.1 to 520.1tcu4
C300 Firmware
From 520.2 to 520.2tcu2
Running on/withPlatform Versions
Honeywell
C300
All versions

Related CWEs

CWE-345
Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

Source: psirt@honeywell.com
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.