Advisories · Technology

Honeywell C300.

Every CVE that names Honeywell C300 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5407 CVE record

CVSS 5.9 Medium

Stack-based buffer overflow in Honeywell C300
- Honeywell C300
- Memory corruption
Not analysed yet 17 Apr 2024
CVE-2023-5392 CVE record

CVSS 7.5 High

Honeywell C300: C300 information leak due to an analysis feature which allows extracting more memory over…
- Honeywell C300
- CWE-1295
Not analysed yet 11 Apr 2024
CVE-2023-26597 CVE record

CVSS 7.5 High

Controller DOS on sending error response
- Honeywell C300
- Denial of service
Not analysed yet 13 Jul 2023
CVE-2023-25770 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Controller stack overflow on decoding messages from the server
- Honeywell C300
- Insecure deserialization
Not analysed yet 13 Jul 2023
CVE-2023-25178 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Controller design flaw - unsigned firmware
- Honeywell C300
- CWE-345
Not analysed yet 13 Jul 2023
CVE-2023-24480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Controller stack overflow when decoding messages from the server
- Honeywell C300
- CWE-116
Not analysed yet 13 Jul 2023