CVE-2023-5394
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Experion Server
- Vendor
- Honeywell
- Product
- Experion Server
- Platforms
- Experion PKS
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 520.2 | affected | semver | Unavailable | 520.2 TCU4 | None listed |
| 510.1 | affected | semver | Unavailable | 510.2 HF13 | None listed |
| 520.1 | affected | semver | Unavailable | 520.1 TCU4 | None listed |
| 511.1 | affected | semver | Unavailable | 511.5 TCU4 HF3 | None listed |
Experion Server
- Vendor
- Honeywell
- Product
- Experion Server
- Platforms
- Experion LX
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 520.2 | affected | semver | Unavailable | 520.2 TCU4 | None listed |
| 511.1 | affected | semver | Unavailable | 511.5 TCU4 HF3 | None listed |
| 520.1 | affected | semver | Unavailable | 520.1 TCU4 | None listed |
Experion Server
- Vendor
- Honeywell
- Product
- Experion Server
- Platforms
- PlantCruise by Experion
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 520.2 | affected | semver | Unavailable | 520.2 TCU4 | None listed |
| 520.1 | affected | semver | Unavailable | 520.1 TCU4 | None listed |
| 520.2 TCU4 HFR2 | affected | semver | Unavailable | 511.5 TCU4 HF3 | None listed |