CVE Feed

    Dashboard / CVE / CVE-2023-5405

    CVE-2023-5405

    Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.

    Published:Apr 17, 2024
    Last Modified:Apr 15, 2026
    EPS:Apr 17, 2024
    EPSS Score:0.00084
    CVSS Score:5.9

    Affected Products

    Vendor
    Honeywell
    Product
    Experion Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-5403 (CVSS 8.1) — Server hostname translation to IP address manipulation which could lead to an attacker performing remote code …
    CVE-2023-5401 (CVSS 8.1) — Server receiving a malformed message based on a using the specified key values can cause a stack overflow vuln…
    CVE-2023-5398 (CVSS 5.9) — Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of s…
    CVE-2023-5397 (CVSS 8.1) — Server receiving a malformed message to create a new connection could lead to an attacker performing remote co…
    CVE-2023-5395 (CVSS 8.1) — Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow re…
    CVE-2023-5394 (CVSS 7.4) — Server receiving a malformed message that where the GCL message hostname may be too large which may cause a st…
    CVE-2023-25948 (CVSS 7.5) — Server information leak of configuration data when an error is generated in response to a specially crafted me…
    CVE-2023-25078 (CVSS 9.8) — Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted messag…
    CVE-2023-24474 (CVSS 7.5) — Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafte…
    CVE-2023-23585 (CVSS 9.8) — Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a sp…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High