Lack of buffer clearing before reuse may result in incorrect system behavior.
The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may cause incorrect system behavior.
Honeywell also recommends updating to the most recent version of
Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are
C300, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are 520.1 before
520.2 TCU9 HF1 and 530 before 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
C300 PCNT02
Vendor
Honeywell
Product
C300 PCNT02
Platforms
Experion PKS
Default status
unaffected
C300 PCNT02 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C300 PCNT05
Vendor
Honeywell
Product
C300 PCNT05
Platforms
Experion PKS
Default status
unaffected
C300 PCNT05 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
FIM4
Vendor
Honeywell
Product
FIM4
Platforms
Experion PKS
Default status
unaffected
FIM4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
FIM8
Vendor
Honeywell
Product
FIM8
Platforms
Experion PKS
Default status
unaffected
FIM8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
UOC
Vendor
Honeywell
Product
UOC
Platforms
Experion PKS
Default status
unaffected
UOC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
CN100
Vendor
Honeywell
Product
CN100
Platforms
Experion PKS
Default status
unaffected
CN100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
HCA
Vendor
Honeywell
Product
HCA
Platforms
Experion PKS
Default status
unaffected
HCA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C300PM
Vendor
Honeywell
Product
C300PM
Platforms
Experion PKS
Default status
unaffected
C300PM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
C200E
Vendor
Honeywell
Product
C200E
Platforms
Experion PKS
Default status
unaffected
C200E · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
520.1
affected
semver
Unavailable
520.2 TCU9
None listed
530
affected
semver
Unavailable
530 TCU3
None listed
Wireless Device Manager
Vendor
Honeywell
Product
Wireless Device Manager
Platforms
OneWireless
Default status
unaffected
Wireless Device Manager · Scoped product and version facts