CVE-2023-23585 Server DoS due to heap overflow
A heap overflow in Honeywell Experion allows attackers to cause a denial of service via crafted messages, impacting industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-23585?
CVE-2023-23585 is a critical memory corruption vulnerability in Honeywell Direct Station, published on 13 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.
See Honeywell Security Notification for recommendations on upgrading and versioning.
Weakness: CWE-787
Which versions are affected by CVE-2023-23585?
It affects 4 products.
Products include Honeywell Direct Station, Honeywell Engineering Station, Honeywell Experion Server, Honeywell Experion Station.
How do I fix CVE-2023-23585?
No fix has been published for CVE-2023-23585 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-23585 being exploited?
There is no known exploitation of CVE-2023-23585 in the wild and no public exploit code.
Other vulnerabilities in Honeywell Direct Station
- CVE-2023-25078 DoS due to heap overflow
- CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver
- CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller
- CVE-2023-25948 Server Data type confusion - info leak
Sources
Also known as GHSA-g39f-h5w4-xhgq.