Record status Published
Identifier year (not publication year) 2025
Source publication Jul 10, 2025
Source updated Aug 4, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Dereferencing of an uninitialized pointer leads to denial of service.
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to a denial of service.
Honeywell recommends updating to the most recent version of
Honeywell Experion PKS: 520.2 TCU9 HF1and 530.1 TCU3 HF1. The affected Experion PKS products are
C300 PCNT02, EHB, EHPM, ELMM, Classic ENIM, ETN, FIM4, FIM8, PGM, and RFIM. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
C300 PCNT02
Vendor Honeywell
Product C300 PCNT02
Default status unaffected
C300 PCNT02 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
EHB
Vendor Honeywell
Product EHB
Default status unaffected
EHB · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
EHPM
Vendor Honeywell
Product EHPM
Default status unaffected
EHPM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
ELMM
Vendor Honeywell
Product ELMM
Default status unaffected
ELMM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
Classic ENIM
Vendor Honeywell
Product Classic ENIM
Default status unaffected
Classic ENIM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
ETN
Vendor Honeywell
Product ETN
Default status unaffected
ETN · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
FIM4
Vendor Honeywell
Product FIM4
Default status unaffected
FIM4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
FIM8
Vendor Honeywell
Product FIM8
Default status unaffected
FIM8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
PGM
Vendor Honeywell
Product PGM
Default status unaffected
PGM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed
RFIM
Vendor Honeywell
Product RFIM
Default status unaffected
RFIM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
520.1 affectedsemver Unavailable 520.2 TCU9 None listed 530 affectedsemver Unavailable 530 TCU3 None listed