An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.
Ha sido descubierto un problema en la plataforma Honeywell Experion Process Knowledge System (PKS): Experion PKS, Release 3xx y versiones anteriores, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430 y Experion PKS, Release 431. Experion PKS No valida adecuadamente la entrada. Enviando un paquete especialmente manipulado, un atacante podría provocar que el proceso termine. Una explotación exitosa impediría cargas de firmware a los dispositivos de la Serie C.
AV:N/AC:M/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-20
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| honeywell | experion_process_knowledge_system | * | <built-in method update of dict object at 0x7c3c40dd6180> | Application |
| honeywell | experion_process_knowledge_system | 410 | <built-in method update of dict object at 0x7c3bf3a1d300> | Application |
| honeywell | experion_process_knowledge_system | 430 | <built-in method update of dict object at 0x7c3c476bcfc0> | Application |
| honeywell | experion_process_knowledge_system | 431 | <built-in method update of dict object at 0x7c3c40dd4ac0> | Application |
| honeywell | experion_process_knowledge_system | * | <built-in method update of dict object at 0x7c3c40dd4380> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:honeywell:experion_process_knowledge_system:410:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:honeywell:experion_process_knowledge_system:430:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:honeywell:experion_process_knowledge_system:431:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:* |