CVE-2023-5393: Honeywell Experion Server

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected products

• Honeywell Experion Server: from 520.2, up to and including 520.2 TCU4; from 511.1, up to and including 511.5 TCU4 HF3; from 520.1, up to and including 520.1 TCU4; from 520.2 TCU4 HFR2, up to and including 511.5 TCU4 HF3

Published 2024-04-11. Last modified 2026-06-17.