--- title: "Honeywell experion process knowledge system vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system type: product description: "Honeywell experion process knowledge system has 7 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2024-04-11 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Honeywell experion process knowledge system vulnerabilities Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell) - **Published CVEs:** 7 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 5 - **Average CVSS:** 8.3 - **First CVE:** 2017-02-13 - **Latest CVE:** 2024-04-11 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 4 | | High | 2 | | Medium | 0 | | Low | 1 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 1 | | [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 1 | | [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 1 | | [CWE-123](https://radicalnotion.ai/cwe/cwe-123) | Write-what-where Condition | 1 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-98](https://radicalnotion.ai/cwe/cwe-98) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2017 | 1 | | 2018 | 0 | | 2019 | 5 | | 2020 | 0 | | 2021 | 0 | | 2022 | 0 | | 2023 | 0 | | 2024 | 1 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | r400 \<= v \< r400.6 | range | 5 | | r410 \<= v \< r410.6 | range | 5 | | r430 \<= v \< r430.2 | range | 5 | | \<= 311 | range | 1 | | \<= 411 | range | 1 | | 410 | range | 1 | | 430 | range | 1 | | 431 | range | 1 | | 510.1 \<= v \<= 510.2 HF13 | range | 1 | | 511.1 \<= v \<= 511.5 TCU4 HF3 | range | 1 | | 520.1 \<= v \<= 520.1 TCU4 | range | 1 | | 520.2 \<= v \<= 520.2 TCU4 | range | 1 | | r400.6 | patched | 5 | | r410.6 | patched | 5 | | r430.2 | patched | 5 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2023-5394 | - | high | 7.4 | No | No | No | | CVE-2014-5435 | - | critical | 9.8 | No | No | Yes | | CVE-2014-5436 | - | high | 7.5 | No | No | Yes | | CVE-2014-9186 | - | critical | 9.8 | No | No | Yes | | CVE-2014-9187 | - | critical | 9.8 | No | No | Yes | | CVE-2014-9189 | - | critical | 9.8 | No | No | Yes | | CVE-2016-8344 | - | low | 3.7 | No | No | No | ## Frequently asked questions ### How many CVEs does Honeywell experion process knowledge system have? Honeywell experion process knowledge system has 7 published CVE records since 2017. ### How many Honeywell experion process knowledge system CVEs are in CISA KEV? None of Honeywell experion process knowledge system's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Honeywell experion process knowledge system vulnerabilities? No Honeywell experion process knowledge system CVEs currently have a tracked public exploit in this dataset. ### Which versions of Honeywell experion process knowledge system are affected? 15 distinct Honeywell experion process knowledge system versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Honeywell experion process knowledge system CVEs? Honeywell experion process knowledge system's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-121 (Stack-based Buffer Overflow), CWE-122 (Heap-based Buffer Overflow), CWE-123 (Write-what-where Condition). ### How many critical Honeywell experion process knowledge system vulnerabilities are there? Honeywell experion process knowledge system has 4 critical and 2 high-severity CVEs. ### What is the average severity of Honeywell experion process knowledge system CVEs? The average CVSS base score across Honeywell experion process knowledge system's scored CVEs is 8.3. ## Other products from this vendor - [Experion Server](https://radicalnotion.ai/vendor/honeywell/experion-server) (17 CVEs) - [C300](https://radicalnotion.ai/vendor/honeywell/c300) (9 CVEs) - [Experion PKS](https://radicalnotion.ai/vendor/honeywell/experion-pks) (9 CVEs) - [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs) - [C200E](https://radicalnotion.ai/vendor/honeywell/c200e) (8 CVEs) - [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs) - [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs) - [FIM4](https://radicalnotion.ai/vendor/honeywell/fim4) (6 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.