CVE-2023-25948 Server Data type confusion - info leak
Attackers can leak configuration data from Honeywell Experion servers by sending specially crafted messages that trigger errors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-25948?
CVE-2023-25948 is a high-severity vulnerability in Honeywell Direct Station, published on 13 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Which versions are affected by CVE-2023-25948?
It affects 4 products.
Products include Honeywell Direct Station, Honeywell Engineering Station, Honeywell Experion Server, Honeywell Experion Station.
How do I fix CVE-2023-25948?
No fix has been published for CVE-2023-25948 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-25948 being exploited?
There is no known exploitation of CVE-2023-25948 in the wild and no public exploit code.
Other vulnerabilities in Honeywell Direct Station
- CVE-2023-23585 Server DoS due to heap overflow
- CVE-2023-25078 DoS due to heap overflow
- CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver
- CVE-2023-24474 Server deserialization missing boundary checks - heap overflow in communication between server and controller
Sources
Also known as GHSA-7fv4-25h2-46hc.