CVE-2023-5390CWE-36

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC

Medium · published January 31, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00570 · 46.5th percentile
Weakness
CWE-36 · Absolute Path Traversal
Published
2024-01-31T17:46Z
EPSS history
Timeline
  • 31 JAN 17:46Z
    An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC
    cvelistv5