CVE-2023-25078CWE-787

DoS due to heap overflow

Critical ยท published July 13, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

๐Ÿšจ A single crafted message can cause a heap overflow that brings your server or console station crashing down! ๐Ÿ”ฅ Think of it like ordering a pizza with just one too many toppings โ€” the overloaded box can't handle it and ends up spilling everywhere! ๐Ÿ• If exploited, attackers could unleash a denial-of-service (DoS) attack, causing your services to grind to a halt and leaving users frustrated and unable to connect. This could be absolutely devastating for operations relying on uptime, leading to potential data loss and customer dissatisfaction!

Put simply

Think of it like ordering a pizza with just one too many toppings โ€” the overloaded box can't handle it and ends up spilling everywhere! ๐Ÿ• CVE-2023-25078 allows for a heap overflow during a specific configuration operation, triggered by handling a specially crafted message. This vulnerability can lead to service crashes and instability that affect server availability.

What to do

If exploited, attackers could unleash a denial-of-service (DoS) attack, causing your services to grind to a halt and leaving users frustrated and unable to connect. This could be absolutely devastating for operations relying on uptime, leading to potential data loss and customer dissatisfaction! To safeguard against this, immediately upgrade to the recommended versions as outlined in the Honeywell Security Notification. Regularly audit your configurations to ensure they are not susceptible to this heap overflow issue. ๐Ÿ” You've got this! With prompt action, you'll keep your systems running smoothly and users happy. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00652 ยท 50.6th percentile
Weakness
CWE-787 ยท Out-of-bounds Write
Published
2023-07-13T10:58Z
EPSS history
Timeline
  • 13 JUL 10:58Z
    DoS due to heap overflow
    cvelistv5