--- title: "Honeywell Experion Server vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/honeywell/experion-server type: product description: "Honeywell Experion Server has 17 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2024-04-17 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Honeywell Experion Server vulnerabilities Vendor: [Honeywell](https://radicalnotion.ai/vendor/honeywell) - **Published CVEs:** 17 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 4 - **Average CVSS:** 7.7 - **First CVE:** 2023-07-13 - **Latest CVE:** 2024-04-17 - **Platforms:** experion lx, experion pks, plantcruise by experion ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 2 | | High | 12 | | Medium | 3 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 4 | | [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 3 | | [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 3 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-394](https://radicalnotion.ai/cwe/cwe-394) | Unexpected Status Code or Return Value | 1 | | [CWE-697](https://radicalnotion.ai/cwe/cwe-697) | Incorrect Comparison | 1 | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 1 | | [CWE-805](https://radicalnotion.ai/cwe/cwe-805) | Buffer Access with Incorrect Length Value | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2023 | 5 | | 2024 | 12 | ## Affected versions (top 21 of 37) | Version | Kind | CVEs | | --- | --- | --- | | 511.5 TCU4 HF4 | exact | 4 | | 520.1 TCU5 | exact | 4 | | 520.2 TCU4 HF2 | exact | 4 | | 511.1 \<= v \<= 511.5 TCU4 HF3 | range | 12 | | 520.1 \<= v \<= 520.1 TCU4 | range | 12 | | 520.2 \<= v \<= 520.2 TCU4 | range | 12 | | 520.2 TCU4 HFR2 \<= v \<= 511.5 TCU4 HF3 | range | 12 | | 510.1 \<= v \<= 510.2 HF13 | range | 11 | | 501.1 \<= v \<= 501.6hf8 | range | 5 | | 501.1 \<= v \<= 501.6HF8 | range | 5 | | 510.1 \<= v \<= 510.2hf12 | range | 5 | | 510.1 \<= v \<= 510.2HF12 | range | 5 | | 511.1 \<= v \<= 511.5tcu3 | range | 5 | | 511.1 \<= v \<= 511.5TCU3 | range | 5 | | 520.1 \<= v \<= 520.1tcu4 | range | 5 | | 510.2 HF14 | patched | 4 | | 511.5 TCU4 HF4 | patched | 4 | | 520.1 TCU5 | patched | 4 | | 520.2 TCU4 HF1 | patched | 4 | | 520.2 TCU4 HF2 | patched | 4 | | 510.1 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2023-5406 | - | medium | 5.9 | No | No | Yes | | CVE-2023-5405 | - | medium | 5.9 | No | No | Yes | | CVE-2023-5404 | - | high | 8.1 | No | No | Yes | | CVE-2023-5403 | - | high | 8.1 | No | No | No | | CVE-2023-5401 | - | high | 8.1 | No | No | No | | CVE-2023-5400 | - | high | 8.1 | No | No | No | | CVE-2023-5398 | - | medium | 5.9 | No | No | No | | CVE-2023-5397 | - | high | 8.1 | No | No | No | | CVE-2023-5396 | - | high | 7.4 | No | No | No | | CVE-2023-5395 | - | high | 8.1 | No | No | Yes | | CVE-2023-5394 | - | high | 7.4 | No | No | No | | CVE-2023-5393 | - | high | 7.4 | No | No | No | | CVE-2023-25948 | Server Data type confusion - info leak | high | 7.5 | No | No | No | | CVE-2023-25078 | DoS due to heap overflow | critical | 9.8 | No | No | No | | CVE-2023-24474 | Server deserialization missing boundary checks - heap overflow in communication between server and controller | high | 7.5 | No | No | No | | CVE-2023-23585 | Server DoS due to heap overflow | critical | 9.8 | No | No | No | | CVE-2023-22435 | Server bad parsing implementation - stack overflow in server::get\_db\_path\_for\_driver | high | 7.5 | No | No | No | ## Frequently asked questions ### How many CVEs does Honeywell Experion Server have? Honeywell Experion Server has 17 published CVE records since 2023. ### How many Honeywell Experion Server CVEs are in CISA KEV? None of Honeywell Experion Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Honeywell Experion Server vulnerabilities? No Honeywell Experion Server CVEs currently have a tracked public exploit in this dataset. ### Which versions of Honeywell Experion Server are affected? 37 distinct Honeywell Experion Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Honeywell Experion Server CVEs? Honeywell Experion Server's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-121 (Stack-based Buffer Overflow), CWE-122 (Heap-based Buffer Overflow), CWE-20 (Improper Input Validation). ### How many critical Honeywell Experion Server vulnerabilities are there? Honeywell Experion Server has 2 critical and 12 high-severity CVEs. ### What is the average severity of Honeywell Experion Server CVEs? The average CVSS base score across Honeywell Experion Server's scored CVEs is 7.7. ## Other products from this vendor - [C300](https://radicalnotion.ai/vendor/honeywell/c300) (9 CVEs) - [Experion PKS](https://radicalnotion.ai/vendor/honeywell/experion-pks) (9 CVEs) - [Saia PG5 Controls Suite](https://radicalnotion.ai/vendor/honeywell/saia-pg5-controls-suite) (9 CVEs) - [C200E](https://radicalnotion.ai/vendor/honeywell/c200e) (8 CVEs) - [c300 firmware](https://radicalnotion.ai/vendor/honeywell/c300-firmware) (7 CVEs) - [experion process knowledge system](https://radicalnotion.ai/vendor/honeywell/experion-process-knowledge-system) (7 CVEs) - [C300 PCNT02](https://radicalnotion.ai/vendor/honeywell/c300-pcnt02) (6 CVEs) - [FIM4](https://radicalnotion.ai/vendor/honeywell/fim4) (6 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/honeywell/experion-server). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.