Honeywell Direct Station vulnerabilities

5 CVEs affecting Honeywell Direct Station, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25948, published 2023-07-13.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-24474, published 2023-07-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message
• CVE-2023-25078, published 2023-07-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security Notification for…
• CVE-2023-23585, published 2023-07-13. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security Notification for recommendations…
• CVE-2023-22435, published 2023-07-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.
• CVE-2023-25948, published 2023-07-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and…