CVE-2023-5394CWE-119
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code…
High · published April 11, 2024
What it is
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
The record
Technical detail
- CVSS v3.1
- 7.4 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00711 · 53.0th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2024-04-11T19:21Z
EPSS history
Timeline