CVE-2021-38395: Honeywell Experion PKS and ACE Controllers Injection
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-38395?
CVE-2021-38395 is a vulnerability found in Honeywell Experion PKS C200, C200E, C300, and ACE controllers, which allows remote execution of arbitrary code and can cause a denial-of-service condition.
How severe is CVE-2021-38395?
CVE-2021-38395 is considered a critical vulnerability with a severity score of 9.8 out of 10.
Which software is affected by CVE-2021-38395?
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are affected by CVE-2021-38395.
How can an attacker exploit CVE-2021-38395?
An attacker can exploit CVE-2021-38395 by sending specially crafted input to the affected controllers, allowing them to execute arbitrary code remotely.
Are there any recommended fixes for CVE-2021-38395?
Yes, it is recommended to apply the necessary patches or updates provided by Honeywell to mitigate CVE-2021-38395.