« Volver al listado

CVE-2023-5407

Estado: AplazadaMedia (5.9)—

Controller denial of service due to improper handling of a specially crafted message received by the controller.

See Honeywell Security Notification for recommendations on upgrading and versioning.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Honeywell — ControllerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-5407",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-5407",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-24T14:30:38.880683Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@honeywell.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@honeywell.com",
      "affectedData": [
        {
          "vendor": "Honeywell",
          "product": "C300",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.2 TCU4 HF1",
                  "status": "unaffected"
                }
              ],
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "510.2 HF14",
                  "status": "unaffected"
                }
              ],
              "version": "510.1",
              "versionType": "semver",
              "lessThanOrEqual": "510.2 HF13"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.1 TCU5",
                  "status": "unaffected"
                }
              ],
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "511.5 TCU4 HF4",
                  "status": "unaffected"
                }
              ],
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "platforms": [
            "Experion PKS"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Honeywell",
          "product": "C300",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.2 TCU4 HF2",
                  "status": "unaffected"
                }
              ],
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "511.5 TCU4 HF4",
                  "status": "unaffected"
                }
              ],
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.1 TCU5",
                  "status": "unaffected"
                }
              ],
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            }
          ],
          "platforms": [
            "Experion LX"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Honeywell",
          "product": "C300",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.2 TCU4 HF2",
                  "status": "unaffected"
                }
              ],
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "520.1 TCU5",
                  "status": "unaffected"
                }
              ],
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "511.5 TCU4 HF4",
                  "status": "unaffected"
                }
              ],
              "version": "520.2 TCU4 HFR2",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "platforms": [
            "PlantCruise by Experion"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-17T17:15:14.650",
  "references": [
    {
      "url": "https://process.honeywell.com",
      "source": "psirt@honeywell.com"
    },
    {
      "url": "https://process.honeywell.com",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@honeywell.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Controller denial of service due to improper handling of a specially crafted message received by the controller.\n\nSee Honeywell Security Notification for recommendations on upgrading and versioning."
    },
    {
      "lang": "es",
      "value": "Denegación de servicio del controlador debido al manejo inadecuado de un mensaje especialmente manipulado recibido por el controlador. Consulte la Notificación de seguridad de Honeywell para obtener recomendaciones sobre actualización y control de versiones."
    }
  ],
  "lastModified": "2026-06-17T06:48:31.910",
  "sourceIdentifier": "psirt@honeywell.com"
}