Vulnerability Details : CVE-2023-5392
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Products affected by CVE-2023-5392
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2023-5392
0.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 38 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-5392
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
Honeywell International Inc. | 2024-04-11 |
CWE ids for CVE-2023-5392
-
The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.Assigned by: psirt@honeywell.com (Secondary)
References for CVE-2023-5392
Jump to