CVE-2023-5392: High severity Honeywell C300 vulnerability

Published Apr 11, 2024

Updated

C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected Software

1 affected component

Honeywell C300

Event History

Apr 11, 2024

CVE Published

via MITRE·07:19 PM

Data Sourced

via MITRE·07:19 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-5392?

CVE-2023-5392 is classified as a high severity vulnerability due to the potential for sensitive information leakage.

How do I fix CVE-2023-5392?

To fix CVE-2023-5392, update to the most recent version of the Honeywell C300 product as recommended by Honeywell.

What type of vulnerability is CVE-2023-5392?

CVE-2023-5392 is an information leak vulnerability that allows excessive memory extraction over the network.

Which products are affected by CVE-2023-5392?

CVE-2023-5392 specifically affects the Honeywell C300 system.

Is there a workaround for CVE-2023-5392?

There is no specific workaround mentioned for CVE-2023-5392; it is recommended to upgrade to mitigate the risks.