Lack of indexes’ validation against buffer borders leads to remote code execution.
The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper index validation against buffer borders leading to remote code execution.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:
520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
C300 PCNT02
Vendor
Honeywell
Product
C300 PCNT02
Platforms
Experion PKS
Default status
unaffected
C300 PCNT02 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C300 PCNT05
Vendor
Honeywell
Product
C300 PCNT05
Platforms
Experion PKS
Default status
unaffected
C300 PCNT05 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
FIM4
Vendor
Honeywell
Product
FIM4
Platforms
Experion PKS
Default status
unaffected
FIM4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
FIM8
Vendor
Honeywell
Product
FIM8
Platforms
Experion PKS
Default status
unaffected
FIM8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
UOC
Vendor
Honeywell
Product
UOC
Platforms
Experion PKS
Default status
unaffected
UOC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
CN100
Vendor
Honeywell
Product
CN100
Platforms
Experion PKS
Default status
unaffected
CN100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
HCA
Vendor
Honeywell
Product
HCA
Platforms
Experion PKS
Default status
unaffected
HCA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C300PM
Vendor
Honeywell
Product
C300PM
Platforms
Experion PKS
Default status
unaffected
C300PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C200E
Vendor
Honeywell
Product
C200E
Platforms
Experion PKS
Default status
unaffected
C200E · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
Wireless Device Manager
Vendor
Honeywell
Product
Wireless Device Manager
Platforms
OneWireless
Default status
unaffected
Wireless Device Manager · Scoped product and version facts