CVE-2023-25078 - Vulnerability Details - OpenCVE

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Honeywell	Direct Station Engineering Station Experion Server Experion Station

Configuration 1 [-]

OR	cpe:2.3:a:honeywell:experion_server::::::::
	cpe:2.3:a:honeywell:experion_server::::::::
	cpe:2.3:a:honeywell:experion_server::::::::
	cpe:2.3:a:honeywell:experion_server::::::::
	cpe:2.3:a:honeywell:experion_server::::::::

Configuration 2 [-]

OR	cpe:2.3:a:honeywell:experion_station::::::::
	cpe:2.3:a:honeywell:experion_station::::::::
	cpe:2.3:a:honeywell:experion_station::::::::
	cpe:2.3:a:honeywell:experion_station::::::::
	cpe:2.3:a:honeywell:experion_station::::::::

Configuration 3 [-]

OR	cpe:2.3:a:honeywell:engineering_station::::::::
	cpe:2.3:a:honeywell:engineering_station::::::::
	cpe:2.3:a:honeywell:engineering_station::::::::

Configuration 4 [-]

OR	cpe:2.3:a:honeywell:direct_station::::::::
	cpe:2.3:a:honeywell:direct_station::::::::
	cpe:2.3:a:honeywell:direct_station::::::::

No data.

References

Link	Providers
https://process.honeywell.com

History

Wed, 05 Mar 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Honeywell

Published: 2023-07-13T10:58:33.546Z

Updated: 2025-03-05T18:50:35.930Z

Reserved: 2023-02-28T23:51:16.636Z

Link: CVE-2023-25078

Vulnrichment

Updated: 2024-08-02T11:11:43.708Z

NVD

Status : Modified

Published: 2023-07-13T11:15:09.060

Modified: 2024-11-21T07:49:03.770

Link: CVE-2023-25078

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-25078", "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "state": "PUBLISHED", "assignerShortName": "Honeywell", "dateReserved": "2023-02-28T23:51:16.636Z", "datePublished": "2023-07-13T10:58:33.546Z", "dateUpdated": "2025-03-05T18:50:35.930Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Experion PKS"], "product": "Experion Server", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "501.6HF8", "status": "affected", "version": "501.1", "versionType": "semver"}, {"lessThanOrEqual": "510.2HF12", "status": "affected", "version": "510.1", "versionType": "semver"}, {"lessThanOrEqual": "511.5TCU3", "status": "affected", "version": "511.1", "versionType": "semver"}, {"lessThanOrEqual": "520.1TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "520.2TCU2", "status": "affected", "version": "520.2", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["Experion PKS"], "product": "Experion Station", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "501.6HF8", "status": "affected", "version": "501.1", "versionType": "semver"}, {"lessThanOrEqual": "510.2HF12", "status": "affected", "version": "510.1", "versionType": "semver"}, {"lessThanOrEqual": "511.5TCU3", "status": "affected", "version": "511.1", "versionType": "semver"}, {"lessThanOrEqual": "520.1TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "520.2TCU2", "status": "affected", "version": "520.2", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["Experion LX", "Experion PlantCruise"], "product": "Engineering Station", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "511.5TCU3", "status": "affected", "version": "510.1", "versionType": "semver"}, {"lessThanOrEqual": "520.1TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "520.2TCU2", "status": "affected", "version": "520.2", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["Experion LX", "Experion PlantCruise"], "product": "Direct Station", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "511.5TCU3", "status": "affected", "version": "510.5", "versionType": "semver"}, {"lessThanOrEqual": "520.1TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "520.2TCU2", "status": "affected", "version": "520.2", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. \n\n<span style=\"background-color: rgb(255, 255, 255);\">See Honeywell Security Notification for recommendations on upgrading and versioning. </span>\n\n"}], "value": "Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.\u00a0\n\nSee Honeywell Security Notification for recommendations on upgrading and versioning. \n\n"}], "impacts": [{"capecId": "CAPEC-10", "descriptions": [{"lang": "en", "value": "CAPEC-10 Buffer Overflow via Environment Variables"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "shortName": "Honeywell", "dateUpdated": "2024-04-22T16:00:21.949Z"}, "references": [{"url": "https://process.honeywell.com"}], "source": {"discovery": "EXTERNAL"}, "title": "DoS due to heap overflow", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:11:43.708Z"}, "title": "CVE Program Container", "references": [{"url": "https://process.honeywell.com", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-05T18:39:58.130317Z", "id": "CVE-2023-25078", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-05T18:50:35.930Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://process.honeywell.com", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:11:43.708Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-25078", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-05T18:39:58.130317Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-05T18:40:27.916Z"}}], "cna": {"title": "DoS due to heap overflow", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-10", "descriptions": [{"lang": "en", "value": "CAPEC-10 Buffer Overflow via Environment Variables"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Honeywell", "product": "Experion Server", "versions": [{"status": "affected", "version": "501.1", "versionType": "semver", "lessThanOrEqual": "501.6HF8"}, {"status": "affected", "version": "510.1", "versionType": "semver", "lessThanOrEqual": "510.2HF12"}, {"status": "affected", "version": "511.1", "versionType": "semver", "lessThanOrEqual": "511.5TCU3"}, {"status": "affected", "version": "520.1", "versionType": "semver", "lessThanOrEqual": "520.1TCU4"}, {"status": "affected", "version": "520.2", "versionType": "semver", "lessThanOrEqual": "520.2TCU2"}], "platforms": ["Experion PKS"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "Experion Station", "versions": [{"status": "affected", "version": "501.1", "versionType": "semver", "lessThanOrEqual": "501.6HF8"}, {"status": "affected", "version": "510.1", "versionType": "semver", "lessThanOrEqual": "510.2HF12"}, {"status": "affected", "version": "511.1", "versionType": "semver", "lessThanOrEqual": "511.5TCU3"}, {"status": "affected", "version": "520.1", "versionType": "semver", "lessThanOrEqual": "520.1TCU4"}, {"status": "affected", "version": "520.2", "versionType": "semver", "lessThanOrEqual": "520.2TCU2"}], "platforms": ["Experion PKS"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "Engineering Station", "versions": [{"status": "affected", "version": "510.1", "versionType": "semver", "lessThanOrEqual": "511.5TCU3"}, {"status": "affected", "version": "520.1", "versionType": "semver", "lessThanOrEqual": "520.1TCU4"}, {"status": "affected", "version": "520.2", "versionType": "semver", "lessThanOrEqual": "520.2TCU2"}], "platforms": ["Experion LX", "Experion PlantCruise"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "Direct Station", "versions": [{"status": "affected", "version": "510.5", "versionType": "semver", "lessThanOrEqual": "511.5TCU3"}, {"status": "affected", "version": "520.1", "versionType": "semver", "lessThanOrEqual": "520.1TCU4"}, {"status": "affected", "version": "520.2", "versionType": "semver", "lessThanOrEqual": "520.2TCU2"}], "platforms": ["Experion LX", "Experion PlantCruise"], "defaultStatus": "unaffected"}], "references": [{"url": "https://process.honeywell.com"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.\u00a0\n\nSee Honeywell Security Notification for recommendations on upgrading and versioning. \n\n", "supportingMedia": [{"type": "text/html", "value": "Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. \n\n<span style=\"background-color: rgb(255, 255, 255);\">See Honeywell Security Notification for recommendations on upgrading and versioning. </span>\n\n", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "shortName": "Honeywell", "dateUpdated": "2024-04-22T16:00:21.949Z"}}}, "cveMetadata": {"cveId": "CVE-2023-25078", "state": "PUBLISHED", "dateUpdated": "2025-03-05T18:50:35.930Z", "dateReserved": "2023-02-28T23:51:16.636Z", "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "datePublished": "2023-07-13T10:58:33.546Z", "assignerShortName": "Honeywell"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:honeywell:experion_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "DED6EB36-056C-422C-9C6E-9EDE45DDB5F9", "versionEndIncluding": "501.6hf8", "versionStartIncluding": "501.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "0511367E-4C62-44C9-BFF9-84E969562A9F", "versionEndIncluding": "510.2hf12", "versionStartIncluding": "510.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A2EAD5D-9B56-4F09-A25B-E98671AE52AC", "versionEndIncluding": "511.5tcu3", "versionStartIncluding": "511.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9EAE3B9-6173-4568-962A-C472F593FC47", "versionEndIncluding": "520.1tcu4", "versionStartIncluding": "520.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "29DFE287-6206-46E2-9118-9159EC44748E", "versionEndIncluding": "520.2tcu2", "versionStartIncluding": "520.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:honeywell:experion_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "A34A2DF5-19BC-4823-8DD3-54C50EA43B65", "versionEndIncluding": "501.6hf8", "versionStartIncluding": "501.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FCC07AA-C8CC-4C69-8011-988932D2F0FB", "versionEndIncluding": "510.2hf12", "versionStartIncluding": "510.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "90CA038F-5C1A-46FF-9EA3-7606B3FF703C", "versionEndIncluding": "511.5tcu3", "versionStartIncluding": "511.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9BAC831-F60D-4010-8EE9-8A741244CB9B", "versionEndIncluding": "520.1tcu4", "versionStartIncluding": "520.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:experion_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1B32781-B0B3-4C74-882B-1DF622DEC11C", "versionEndIncluding": "520.2tcu2", "versionStartIncluding": "520.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:honeywell:engineering_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "3147FD0E-091B-4096-87D1-C006E3667F6B", "versionEndIncluding": "511.tcu3", "versionStartIncluding": "510.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:engineering_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "96A06B44-5738-4A77-98EB-DAB61C07A6D5", "versionEndIncluding": "520.1tcu4", "versionStartIncluding": "520.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:engineering_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "177013AA-A2F8-4FC4-82AC-79A6A7196767", "versionEndIncluding": "520.2tcu2", "versionStartIncluding": "520.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:honeywell:direct_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5F7E4E9-50A2-427F-9945-2A83F4D8C62D", "versionEndIncluding": "511.tcu3", "versionStartIncluding": "510.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:direct_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ABEC6C0-CF74-49E3-88BA-5D06484DFAA8", "versionEndIncluding": "520.1tcu4", "versionStartIncluding": "520.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:honeywell:direct_station:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD33B3A2-FC18-4BE6-98A7-88D06339EE28", "versionEndIncluding": "520.2tcu2", "versionStartIncluding": "520.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.\u00a0\n\nSee Honeywell Security Notification for recommendations on upgrading and versioning. \n\n"}], "id": "CVE-2023-25078", "lastModified": "2024-11-21T07:49:03.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "psirt@honeywell.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-13T11:15:09.060", "references": [{"source": "psirt@honeywell.com", "tags": ["Product"], "url": "https://process.honeywell.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://process.honeywell.com"}], "sourceIdentifier": "psirt@honeywell.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@honeywell.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}