Integer underflow during processing of short network packets in CDA FTEB responder
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in improper integer data value checking during subtraction leading to a denial of service. Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1. The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Honeywell C300 PCNT02
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell C300 PCNT05
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell FIM4
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell FIM8
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell UOC
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell CN100
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell HCA
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell C300PM
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3
- Honeywell C200E
From 520.1 · through 520.2 TCU9; From 530 · through 530 TCU3