What’s Vulnerable › Vulnerabilities
CVE-2023-5392
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-11 · updated 2026-06-17
- Weakness: CWE-1295
Description
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected products
- Honeywell C300: from 510.1 through 510.2_hf13; from 511.1 through 511.5_tcu4_hf3; from 520.1 through 520.1_tcu4; from 520.2 through 520.2_tcu4; from 520.2_tcu4_hfr2 through 511.5_tcu4_hf3
References
Get alerted when CVE-2023-5392 or the next vulnerability affects your stack