CVE-2023-22435: Honeywell Direct Station

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

Affected products

• Honeywell Direct Station: from 510.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Engineering Station: from 510.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Experion Server: from 501.1, up to and including 501.6hf8; from 510.1, up to and including 510.2hf12; from 511.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Experion Station: from 501.1, up to and including 501.6hf8; from 510.1, up to and including 510.2hf12; from 511.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2

Published 2023-07-13. Last modified 2026-06-17.