CVE-2023-26597: Controller DOS on sending error response
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-26597?
CVE-2023-26597 refers to a vulnerability that can cause a denial of service (DoS) attack on a controller due to buffer overflow in the handling of a specially crafted message received by the controller.
Which software versions are affected by CVE-2023-26597?
The Honeywell C300 Firmware versions 501.1-501.6hf8, 510.1-510.2hf12, 511.1-511.5tcu3, 520.1-520.1tcu4, and 520.2-520.2tcu2 are affected by CVE-2023-26597.
What is the severity of CVE-2023-26597?
CVE-2023-26597 has a severity rating of 7.5, which is considered high.
How can I fix CVE-2023-26597?
To fix CVE-2023-26597, it is recommended to update the Honeywell C300 Firmware to a non-vulnerable version provided by Honeywell.
Where can I find more information about CVE-2023-26597?
You can find more information about CVE-2023-26597 on the Honeywell Process Solutions website at https://process.honeywell.com.