CVE-2021-38399: Honeywell Experion PKS and ACE Controllers Relative Path Traversal
Published Oct 28, 2022
·Updated
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.
Affected Software
11 affected components
Honeywell C200
Honeywell C200E
Honeywell C300 and ACE controllers
Honeywell C200 Firmware
Honeywell C200
Honeywell C200e Firmware
Honeywell C200E
Honeywell C300 Firmware
Honeywell C300
Honeywell Application Control Environment Firmware
Honeywell Application Control Environment
Event History
Oct 28, 2022
CVE Published
via MITRE·01:19 AM
Data Sourced
via MITRE·01:19 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-38399.
2
What is the severity of CVE-2021-38399?
The severity of CVE-2021-38399 is high with a CVSS score of 7.5.
3
Which software versions are affected by CVE-2021-38399?
Honeywell Experion PKS C200, C200E, C300, and ACE controllers with specific firmware versions are affected by CVE-2021-38399.
4
What is the risk of the vulnerability?
The vulnerability may allow an attacker to access unauthorized files and directories.
5
Are there any fixes or patches available for CVE-2021-38399?
To address the vulnerability, it is recommended to follow the mitigation steps provided by Honeywell as mentioned in their notification.