CVE-2016-8344

Severity: low (CVSS 3.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-13 · updated 2026-06-17
Weakness: CWE-20

Description

An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.

Affected products

Honeywell Experion PKS: through 311; through 411; 410, 430, 431

References

http://www.securityfocus.com/bid/93950
https://ics-cert.us-cert.gov/advisories/ICSA-16-301-01
http://www.securityfocus.com/bid/93950
https://ics-cert.us-cert.gov/advisories/ICSA-16-301-01

Get alerted when CVE-2016-8344 or the next vulnerability affects your stack