CVE-2023-5400

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure.  See Honeywell Security Notification for recommendations on upgrading and versioning.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

VendorProductVersions
HoneywellExperion Server>= 520.2, <= 520.2 TCU4; >= 510.1, <= 510.2 HF13; >= 520.1, <= 520.1 TCU4; >= 511.1, <= 511.5 TCU4 HF3
HoneywellExperion Server>= 520.2, <= 520.2 TCU4; >= 511.1, <= 511.5 TCU4 HF3; >= 520.1, <= 520.1 TCU4
HoneywellExperion Server>= 520.2, <= 520.2 TCU4; >= 520.1, <= 520.1 TCU4; >= 520.2 TCU4 HFR2, <= 511.5 TCU4 HF3
honeywellexperion_server*
honeywellexperion_server*
honeywellexperion_server*
honeywellexperion_server*

References

Timeline

Published
Apr 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54000In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externel_lb and reset are executed tCVE-2023-54001In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() In the abovCVE-2023-54002In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance BalanceCVE-2023-54003In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create reCVE-2023-540047.5In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). sCVE-2023-54005In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destrucCVE-2023-54006In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-race around unix_tot_inflight. unix_tot_inflight is CVE-2023-54007In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF DuringCVE-2023-54008In the Linux kernel, the following vulnerability has been resolved: virtio_vdpa: build affinity masks conditionally We try to build affiniCVE-2023-54009In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error pathCVE-2023-54018.1Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to CVE-2023-54010In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_di