← Back

CVE-2023-25770

nvd nist
Published: Jul 13, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected (5)

Honeywell
1 product
C300 Firmware
Configuration A
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honeywell
C300 Firmware
From 501.1 to 501.6hf8
C300 Firmware
From 510.1 to 510.2hf12
C300 Firmware
From 511.1 to 511.5tcu3
C300 Firmware
From 520.1 to 520.1tcu4
C300 Firmware
From 520.2 to 520.2tcu2
Running on/withPlatform Versions
Honeywell
C300
All versions

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

Source: psirt@honeywell.com
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.