CVE-2023-5394

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-11 · updated 2026-06-17
Weakness: CWE-119

Description

Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

Honeywell Experion Lx: from 520.2 through 520.2 TCU4; from 511.1 through 511.5 TCU4 HF3; from 520.1 through 520.1 TCU4
Honeywell Experion PKS: from 520.2 through 520.2 TCU4; from 510.1 through 510.2 HF13; from 520.1 through 520.1 TCU4; from 511.1 through 511.5 TCU4 HF3
Honeywell Plantcruise: from 520.2 through 520.2 TCU4; from 520.1 through 520.1 TCU4; from 520.2 TCU4 HFR2 through 511.5 TCU4 HF3

References

Get alerted when CVE-2023-5394 or the next vulnerability affects your stack