Known vulnerabilities in Experion PKS
Vendor:
Honeywell International, Inc
Software:
Experion PKS
Software CPE:
cpe:2.3:a:honeywell_international:experion_pks:*:*:*:*:*:*:*:*
Website:
https://www.honeywell.com/
Total vulnerabilities:
32
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (32)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113220 - Integer underflow CVE-2025-3947 |
CWE-191 | Medium | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU113217 - Integer underflow CVE-2025-3946 |
CWE-191 | High | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU113216 - Integer underflow CVE-2025-2523 |
CWE-191 | High | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU113215 - Sensitive Information in Resource Not Removed Before Reuse CVE-2025-2522 |
CWE-226 | Medium | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU113214 - Memory corruption CVE-2025-2521 |
CWE-119 | High | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU113212 - Use of Uninitialized Variable CVE-2025-2520 |
CWE-457 | Medium | R520.2 TCU9 Hot Fix 1, R530 TCU3 Hot Fix 1 | 25.07.2025 |
SB2025072517 |
||
| #VU89028 - Memory corruption CVE-2023-5394 |
CWE-119 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89027 - Buffer Access with Incorrect Length Value CVE-2023-5396 |
CWE-805 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89026 - Improper input validation CVE-2023-5397 |
CWE-20 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89025 - Binding to an Unrestricted IP Address CVE-2023-5398 |
CWE-1327 | Medium | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89024 - Stack-based buffer overflow CVE-2023-5403 |
CWE-121 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89023 - Stack-based buffer overflow CVE-2023-5401 |
CWE-121 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89021 - Heap-based Buffer Overflow CVE-2023-5404 |
CWE-122 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89020 - Heap-based Buffer Overflow CVE-2023-5400 |
CWE-122 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89019 - Out-of-bounds write CVE-2023-5405 |
CWE-787 | Medium | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89018 - Out-of-bounds write CVE-2023-5406 |
CWE-787 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89017 - Debug Messages Revealing Unnecessary Information CVE-2023-5392 |
CWE-1295 | Medium | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89016 - Stack-based buffer overflow CVE-2023-5407 |
CWE-121 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89015 - Absolute Path Traversal CVE-2023-5390 |
CWE-36 | Medium | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
||
| #VU89014 - Exposed Dangerous Method or Function CVE-2023-5389 |
CWE-749 | High | R510.2 HF14, R511.5 TCU4 HF4, R520.1 TCU5, R520.2 TCU4 HF2 | 26.04.2024 |
SB2024042629 |
Showing elements 1 - 20 out of 32