CVE-2023-5389: Critical severity honeywell controledge unit operations controller vulnerability
An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files that could result in subsequent execution of a malicious application if triggered. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5389?
CVE-2023-5389 is classified as a high-severity vulnerability due to the potential for unauthorized file modifications.
How do I fix CVE-2023-5389?
To fix CVE-2023-5389, update the Honeywell Controledge firmware to the latest version available from the manufacturer.
Which Honeywell products are affected by CVE-2023-5389?
CVE-2023-5389 affects the Honeywell ControlEdge Virtual UOC and ControlEdge Unit Operations Controller firmware.
What could be the impact of exploiting CVE-2023-5389?
Exploiting CVE-2023-5389 could lead to unauthorized file modifications that may cause unexpected behavior in control systems.
Is there a workaround for CVE-2023-5389?
Currently, the best recommendation for CVE-2023-5389 is to apply the firmware updates as no specific workarounds are provided.