« Volver al listado

CVE-2023-5394

Estado: AplazadaAlta (7.4)—

Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Honeywell — GCL MessageAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-5394",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-5394",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-09T20:06:35.980311Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@honeywell.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@honeywell.com",
      "affectedData": [
        {
          "vendor": "Honeywell",
          "product": "Experion Server",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "510.1",
              "versionType": "semver",
              "lessThanOrEqual": "510.2 HF13"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "platforms": [
            "Experion PKS"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Honeywell",
          "product": "Experion Server",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            }
          ],
          "platforms": [
            "Experion LX"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Honeywell",
          "product": "Experion Server",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "version": "520.2 TCU4 HFR2",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "platforms": [
            "PlantCruise by Experion"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:*"
          ],
          "vendor": "honeywell",
          "product": "experion_process_knowledge_system",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "510.1",
              "versionType": "semver",
              "lessThanOrEqual": "510.2 HF13"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:h:honeywell:experion_lx:*:*:*:*:*:*:*:*"
          ],
          "vendor": "honeywell",
          "product": "experion_lx",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "511.1",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:honeywell:plantcruise:*:*:*:*:*:*:*:*"
          ],
          "vendor": "honeywell",
          "product": "plantcruise",
          "versions": [
            {
              "status": "affected",
              "version": "520.2",
              "versionType": "semver",
              "lessThanOrEqual": "520.2 TCU4"
            },
            {
              "status": "affected",
              "version": "520.1",
              "versionType": "semver",
              "lessThanOrEqual": "520.1 TCU4"
            },
            {
              "status": "affected",
              "version": "520.2 TCU4 HFR2",
              "versionType": "semver",
              "lessThanOrEqual": "511.5 TCU4 HF3"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-11T20:15:10.183",
  "references": [
    {
      "url": "https://process.honeywell.com",
      "source": "psirt@honeywell.com"
    },
    {
      "url": "https://process.honeywell.com",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@honeywell.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning. \n\n"
    },
    {
      "lang": "es",
      "value": "El servidor recibe un mensaje con formato incorrecto que indica que el nombre de host del mensaje GCL puede ser demasiado grande, lo que puede provocar un desbordamiento de la pila; lo que resulta en una posible ejecución remota de código. Honeywell recomienda actualizar a la versión más reciente del producto. Consulte la Notificación de seguridad de Honeywell para obtener recomendaciones sobre actualización y control de versiones."
    }
  ],
  "lastModified": "2026-06-17T06:48:30.230",
  "sourceIdentifier": "psirt@honeywell.com"
}