CVE Feed

    Dashboard / CVE / CVE-2023-5394

    CVE-2023-5394

    Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

    Published:Apr 11, 2024
    Last Modified:Apr 15, 2026
    EPS:Apr 11, 2024
    EPSS Score:0.0085
    CVSS Score:7.4

    Affected Products

    Vendor
    Honeywell
    Product
    Experion Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-5405 (CVSS 5.9) — Server information leak for the CDA Server process memory can occur when an error is generated in response to …
    CVE-2023-5403 (CVSS 8.1) — Server hostname translation to IP address manipulation which could lead to an attacker performing remote code …
    CVE-2023-5401 (CVSS 8.1) — Server receiving a malformed message based on a using the specified key values can cause a stack overflow vuln…
    CVE-2023-5398 (CVSS 5.9) — Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of s…
    CVE-2023-5397 (CVSS 8.1) — Server receiving a malformed message to create a new connection could lead to an attacker performing remote co…
    CVE-2023-5395 (CVSS 8.1) — Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow re…
    CVE-2023-25948 (CVSS 7.5) — Server information leak of configuration data when an error is generated in response to a specially crafted me…
    CVE-2023-25078 (CVSS 9.8) — Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted messag…
    CVE-2023-24474 (CVSS 7.5) — Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafte…
    CVE-2023-23585 (CVSS 9.8) — Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a sp…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High