← Back

CVE-2023-5396

nvd nist
Published: Apr 17, 2024Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 2.2 / Impact: 5.2
Source: psirt@honeywell.com (Secondary)

Description

Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.

Related CWEs

CWE-805
Buffer Access with Incorrect Length Value
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

References (2)

Source: psirt@honeywell.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.