CVE-2023-24480: Honeywell c300 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

• Honeywell c300 Firmware: from 501.1, up to and including 501.6hf8; from 510.1, up to and including 510.2hf12; from 511.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2

Published 2023-07-13. Last modified 2026-06-17.