5.9

CVE-2023-5398

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorhoneywell
≫
Product experion_server
Default Statusunknown
Version <= 520.2_tcu4
Version 520.2
Status affected
Vendorhoneywell
≫
Product experion_server
Default Statusunknown
Version <= 510.2_hf13
Version 510.1
Status affected
Vendorhoneywell
≫
Product experion_server
Default Statusunknown
Version <= 520.1_tcu4
Version 520.1
Status affected
Vendorhoneywell
≫
Product experion_server
Default Statusunknown
Version <= 511.5_tcu4_hf3
Version 511.1
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.133
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@honeywell.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1327 Binding to an Unrestricted IP Address

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.