--- title: "Honeywell C300 vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/honeywell/c300 type: product description: "Honeywell C300 has 9 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2024-04-17 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Honeywell C300 vulnerabilities Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell) - **Published CVEs:** 9 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 1 - **Average CVSS:** 8.6 - **First CVE:** 2022-10-28 - **Latest CVE:** 2024-04-17 - **Platforms:** experion lx, experion pks, experion plantcruise, plantcruise by experion ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 5 | | High | 3 | | Medium | 1 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-116](https://radicalnotion.ai/cwe/cwe-116) | Improper Encoding or Escaping of Output | 1 | | [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 1 | | [CWE-1295](https://radicalnotion.ai/cwe/cwe-1295) | Debug Messages Revealing Unnecessary Information | 1 | | [CWE-23](https://radicalnotion.ai/cwe/cwe-23) | Relative Path Traversal | 1 | | [CWE-345](https://radicalnotion.ai/cwe/cwe-345) | Insufficient Verification of Data Authenticity | 1 | | [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 1 | | [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 | | [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2022 | 3 | | 2023 | 4 | | 2024 | 2 | ## Affected versions (top 20 of 31) | Version | Kind | CVEs | | --- | --- | --- | | 511.5 TCU4 HF4 | exact | 1 | | 520.1 TCU5 | exact | 1 | | 520.2 TCU4 HF2 | exact | 1 | | 501.1 \<= v \<= 501.6HF8 | range | 4 | | 510.1 \<= v \<= 510.2HF12 | range | 4 | | 510.1 \<= v \<= 511.5TCU3 | range | 4 | | 511.1 \<= v \<= 511.5TCU3 | range | 4 | | 520.1 \<= v \<= 520.1TCU4 | range | 4 | | 520.2 \<= v \<= 520.2TCU2 | range | 4 | | 510.1 \<= v \<= 510.2 HF13 | range | 2 | | 511.1 \<= v \<= 511.5 TCU4 HF3 | range | 2 | | 520.1 \<= v \<= 520.1 TCU4 | range | 2 | | 520.2 \<= v \<= 520.2 TCU4 | range | 2 | | 520.2 TCU4 HFR2 \<= v \<= 511.5 TCU4 HF3 | range | 2 | | \>= 510.2 HF14 | range | 1 | | 510.2 HF14 | patched | 1 | | 511.5 TCU4 HF4 | patched | 1 | | 520.1 TCU5 | patched | 1 | | 520.2 TCU4 HF1 | patched | 1 | | 520.2 TCU4 HF2 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2023-5407 | - | medium | 5.9 | No | No | Yes | | CVE-2023-5392 | - | high | 7.5 | No | No | No | | CVE-2023-26597 | Controller DOS on sending error response | high | 7.5 | No | No | No | | CVE-2023-25770 | Controller stack overflow on decoding messages from the server | critical | 9.8 | No | No | No | | CVE-2023-25178 | Controller design flaw - unsigned firmware | critical | 9.8 | No | No | No | | CVE-2023-24480 | Controller stack overflow when decoding messages from the server | critical | 9.8 | No | No | No | | CVE-2021-38397 | Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type | critical | 10.0 | No | No | No | | CVE-2021-38395 | Honeywell Experion PKS and ACE Controllers Injection | critical | 9.8 | No | No | No | | CVE-2021-38399 | Honeywell Experion PKS and ACE Controllers Relative Path Traversal | high | 7.5 | No | No | No | ## Frequently asked questions ### How many CVEs does Honeywell C300 have? Honeywell C300 has 9 published CVE records since 2022. ### How many Honeywell C300 CVEs are in CISA KEV? None of Honeywell C300's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Honeywell C300 vulnerabilities? No Honeywell C300 CVEs currently have a tracked public exploit in this dataset. ### Which versions of Honeywell C300 are affected? 31 distinct Honeywell C300 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Honeywell C300 CVEs? Honeywell C300's CVEs most often map to these CWE weakness types: CWE-116 (Improper Encoding or Escaping of Output), CWE-121 (Stack-based Buffer Overflow), CWE-1295 (Debug Messages Revealing Unnecessary Information), CWE-23 (Relative Path Traversal). ### How many critical Honeywell C300 vulnerabilities are there? Honeywell C300 has 5 critical and 3 high-severity CVEs. ### What is the average severity of Honeywell C300 CVEs? The average CVSS base score across Honeywell C300's scored CVEs is 8.6. ## Other products from this vendor - [Experion Server](https://radicalnotion.ai/vendor/honeywell/experion-server) (17 CVEs) - [Experion PKS](https://radicalnotion.ai/vendor/honeywell/experion-pks) (9 CVEs) - [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs) - [C200E](https://radicalnotion.ai/vendor/honeywell/c200e) (8 CVEs) - [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs) - [experion process knowledge system](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system) (7 CVEs) - [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs) - [FIM4](https://radicalnotion.ai/vendor/honeywell/fim4) (6 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/c300). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.