CVE-2023-26597

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://process.honeywell.com	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:h:honeywell:c300:-:*:*:*:*:*:*:*

OR	cpe:2.3:o:honeywell:c300_firmware::::::::
	cpe:2.3:o:honeywell:c300_firmware::::::::
	cpe:2.3:o:honeywell:c300_firmware::::::::
	cpe:2.3:o:honeywell:c300_firmware::::::::
	cpe:2.3:o:honeywell:c300_firmware::::::::

History

No history.

Information

Published : 2023-07-13 12:15

Updated : 2024-04-22 16:15

NVD link : CVE-2023-26597

Mitre link : CVE-2023-26597

CVE.ORG link : CVE-2023-26597

JSON object : View

Products Affected

honeywell

c300
c300_firmware

CWE

CWE-787

Out-of-bounds Write

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2023-26597", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "psirt@honeywell.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-07-13T12:15:09.253", "references": [{"url": "https://process.honeywell.com", "tags": ["Product"], "source": "psirt@honeywell.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "psirt@honeywell.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller.\u00a0See Honeywell Security Notification for recommendations on upgrading and versioning.\u00a0See Honeywell Security Notification for recommendations on upgrading and versioning. \n\n"}], "lastModified": "2024-04-22T16:15:13.033", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:honeywell:c300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CEA14D67-E320-490E-92E6-CC135EBBA245"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8B1523A-A717-4BE3-97B1-5634188EAAF9", "versionEndIncluding": "501.6hf8", "versionStartIncluding": "501.1"}, {"criteria": "cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F01D307E-1DD4-4B16-A1EF-81503E5C7CF1", "versionEndIncluding": "510.2hf12", "versionStartIncluding": "510.1"}, {"criteria": "cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AAAF640-4704-4BEA-AB36-911B08227497", "versionEndIncluding": "511.5tcu3", "versionStartIncluding": "511.1"}, {"criteria": "cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "254FC5F7-6F70-4E38-95B8-E0042AB3321F", "versionEndIncluding": "520.1tcu4", "versionStartIncluding": "520.1"}, {"criteria": "cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F075CA91-AFC8-4463-9D02-BE45F98E4840", "versionEndIncluding": "520.2tcu2", "versionStartIncluding": "520.2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@honeywell.com"}