PT-2024-14792
CVE-2023-5392
·
Published
2024-04-11
·
Updated
2024-04-12
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Honeywell C300 (affected versions not specified)
Description
The issue is related to an analysis feature that allows extracting more memory over the network than required by the function, leading to an information leak.
Recommendations
Update to the most recent version of the product, following the recommendations on upgrading and versioning provided in the Honeywell Security Notification.
Found an issue in the description? Have something to add? Feel free to write us 👾