What’s Vulnerable › Vulnerabilities
CVE-2023-5393
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-11 · updated 2026-06-17
- Weakness: CWE-130
Description
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected products
- Honeywell Experion Server: from 520.2 through 520.2 TCU4; from 511.1 through 511.5 TCU4 HF3; from 520.1 through 520.1 TCU4; from 520.2 TCU4 HFR2 through 511.5 TCU4 HF3
References
Get alerted when CVE-2023-5393 or the next vulnerability affects your stack