Known vulnerabilities in Experion LX
Vendor:
Honeywell International, Inc
Software:
Experion LX
Software CPE:
cpe:2.3:a:honeywell_international:experion_lx:*:*:*:*:*:*:*:*
Website:
https://www.honeywell.com/
Total vulnerabilities:
26
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (26)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89029 - Improper Handling of Length Parameter Inconsistency CVE-2023-5393 |
CWE-130 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89028 - Memory corruption CVE-2023-5394 |
CWE-119 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89027 - Buffer Access with Incorrect Length Value CVE-2023-5396 |
CWE-805 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89026 - Improper input validation CVE-2023-5397 |
CWE-20 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89025 - Binding to an Unrestricted IP Address CVE-2023-5398 |
CWE-1327 | Medium | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89024 - Stack-based buffer overflow CVE-2023-5403 |
CWE-121 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89023 - Stack-based buffer overflow CVE-2023-5401 |
CWE-121 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89022 - Stack-based buffer overflow CVE-2023-5395 |
CWE-121 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89021 - Heap-based Buffer Overflow CVE-2023-5404 |
CWE-122 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89020 - Heap-based Buffer Overflow CVE-2023-5400 |
CWE-122 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89019 - Out-of-bounds write CVE-2023-5405 |
CWE-787 | Medium | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89018 - Out-of-bounds write CVE-2023-5406 |
CWE-787 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89017 - Debug Messages Revealing Unnecessary Information CVE-2023-5392 |
CWE-1295 | Medium | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89016 - Stack-based buffer overflow CVE-2023-5407 |
CWE-121 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89015 - Absolute Path Traversal CVE-2023-5390 |
CWE-36 | Medium | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89014 - Exposed Dangerous Method or Function CVE-2023-5389 |
CWE-749 | High | R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU78252 - Heap-based Buffer Overflow CVE-2023-24474 |
CWE-122 | High | R520.2 | 14.07.2023 |
SB2023071410 |
||
| #VU78251 - Improper Control of Generation of Code ('Code Injection') CVE-2023-22435 |
CWE-94 | High | R520.2 | 14.07.2023 |
SB2023071410 |
||
| #VU78250 - Insufficient Verification of Data Authenticity CVE-2023-25178 |
CWE-345 | High | R520.2 | 14.07.2023 |
SB2023071410 |
||
| #VU78249 - Deserialization of Untrusted Data CVE-2023-25770 |
CWE-502 | High | R520.2 | 14.07.2023 |
SB2023071410 |
Showing elements 1 - 20 out of 26