Dereferencing of an uninitialized pointer leads to denial of service.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to a denial of service. Honeywell recommends updating to the most recent version of Honeywell Experion PKS: 520.2 TCU9 HF1and 530.1 TCU3 HF1. The affected Experion PKS products are C300 PCNT02, EHB, EHPM, ELMM, Classic ENIM, ETN, FIM4, FIM8, PGM, and RFIM. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Honeywell C300 PCNT02
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell EHB
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell EHPM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell ELMM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell Classic ENIM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell ETN
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell FIM4
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell FIM8
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell PGM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell RFIM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3