CVE-2023-25948
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected (16)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 501.1 to 501.6hf8 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 501.1 to 501.6hf8 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 510.1 to 511.tcu3 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 510.1 to 511.tcu3 |
Related CWEs
CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
CWE-394
Unexpected Status Code or Return Value
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
References (2)
Timeline
No history available yet.