CVE-2023-25948: Honeywell Direct Station

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

• Honeywell Direct Station: from 510.1, up to and including 511.tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Engineering Station: from 510.1, up to and including 511.tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Experion Server: from 501.1, up to and including 501.6hf8; from 510.1, up to and including 510.2hf12; from 511.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2
• Honeywell Experion Station: from 501.1, up to and including 501.6hf8; from 510.1, up to and including 510.2hf12; from 511.1, up to and including 511.5tcu3; from 520.1, up to and including 520.1tcu4; from 520.2, up to and including 520.2tcu2

Published 2023-07-13. Last modified 2026-06-17.