--- title: "Honeywell Experion PKS vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/honeywell/experion-pks type: product description: "Honeywell Experion PKS has 9 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2025-07-10 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Honeywell Experion PKS vulnerabilities Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell) - **Published CVEs:** 9 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 5 - **Average CVSS:** 9.2 - **First CVE:** 2019-03-25 - **Latest CVE:** 2025-07-10 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 6 | | High | 3 | | Medium | 0 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 1 | | [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 1 | | [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 1 | | [CWE-123](https://radicalnotion.ai/cwe/cwe-123) | Write-what-where Condition | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-23](https://radicalnotion.ai/cwe/cwe-23) | Relative Path Traversal | 1 | | [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 | | [CWE-74](https://radicalnotion.ai/cwe/cwe-74) | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 5 | | 2020 | 0 | | 2021 | 0 | | 2022 | 3 | | 2023 | 0 | | 2024 | 0 | | 2025 | 1 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | ACE controllers | exact | 3 | | C200 | exact | 3 | | C200E | exact | 3 | | C300 | exact | 3 | | R40x before R400.6 | exact | 3 | | R41x before R410.6 | exact | 3 | | R43x before R430.2 | exact | 3 | | R40x prior to R400.6 | exact | 2 | | R41x prior to R410.6 | exact | 2 | | R43x prior to R430.2 | exact | 2 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2025-2521 | Lack of indexes’ validation against buffer borders leads to remote code execution. | high | 8.6 | No | No | No | | CVE-2021-38397 | Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type | critical | 10.0 | No | No | No | | CVE-2021-38395 | Honeywell Experion PKS and ACE Controllers Injection | critical | 9.8 | No | No | No | | CVE-2021-38399 | Honeywell Experion PKS and ACE Controllers Relative Path Traversal | high | 7.5 | No | No | No | | CVE-2014-5435 | - | critical | 9.8 | No | No | Yes | | CVE-2014-5436 | - | high | 7.5 | No | No | Yes | | CVE-2014-9186 | - | critical | 9.8 | No | No | Yes | | CVE-2014-9187 | - | critical | 9.8 | No | No | Yes | | CVE-2014-9189 | - | critical | 9.8 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Honeywell Experion PKS have? Honeywell Experion PKS has 9 published CVE records since 2019. ### How many Honeywell Experion PKS CVEs are in CISA KEV? None of Honeywell Experion PKS's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Honeywell Experion PKS vulnerabilities? No Honeywell Experion PKS CVEs currently have a tracked public exploit in this dataset. ### Which versions of Honeywell Experion PKS are affected? 10 distinct Honeywell Experion PKS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Honeywell Experion PKS CVEs? Honeywell Experion PKS's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-121 (Stack-based Buffer Overflow), CWE-122 (Heap-based Buffer Overflow), CWE-123 (Write-what-where Condition). ### How many critical Honeywell Experion PKS vulnerabilities are there? Honeywell Experion PKS has 6 critical and 3 high-severity CVEs. ### What is the average severity of Honeywell Experion PKS CVEs? The average CVSS base score across Honeywell Experion PKS's scored CVEs is 9.2. ## Other products from this vendor - [Experion Server](https://radicalnotion.ai/vendor/honeywell/experion-server) (17 CVEs) - [C300](https://radicalnotion.ai/vendor/honeywell/c300) (9 CVEs) - [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs) - [C200E](https://radicalnotion.ai/vendor/honeywell/c200e) (8 CVEs) - [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs) - [experion process knowledge system](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system) (7 CVEs) - [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs) - [FIM4](https://radicalnotion.ai/vendor/honeywell/fim4) (6 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/experion-pks). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.