CVE-2023-5394CWE-119

Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code…

High · published April 11, 2024

CVSS v3.1
7.4
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2024-04-11T19:21Z
EPSS history
Timeline
  • 11 APR 19:21Z
    Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code…
    cvelistv5