CVE-2023-5407

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Controller denial of service due to improper handling of a specially crafted message received by the controller.

See Honeywell Security Notification for recommendations on upgrading and versioning.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

VendorProductVersions
HoneywellC300>= 520.2, <= 520.2 TCU4; >= 510.1, <= 510.2 HF13; >= 520.1, <= 520.1 TCU4; >= 511.1, <= 511.5 TCU4 HF3
HoneywellC300>= 520.2, <= 520.2 TCU4; >= 511.1, <= 511.5 TCU4 HF3; >= 520.1, <= 520.1 TCU4
HoneywellC300>= 520.2, <= 520.2 TCU4; >= 520.1, <= 520.1 TCU4; >= 520.2 TCU4 HFR2, <= 511.5 TCU4 HF3

References

Timeline

Published
Apr 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54070In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50fCVE-2023-540718.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use work to update rate to avoid RCU warning The ieee8021CVE-2023-54072In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers ThCVE-2023-54073In the Linux kernel, the following vulnerability has been resolved: tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call sitCVE-2023-540747.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use correct encap attribute during invalidation With introdCVE-2023-54075In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info Add mCVE-2023-540769.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcoCVE-2023-540777.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft failed Label ATTR_ROOT in nCVE-2023-54078In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in CVE-2023-540797.8In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove CVE-2023-54087.2A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker CVE-2023-54080In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write
CVE-2023-5407: Medium severity, CVSS 5.9 | Vulnix