CVE-2016-8344
published 2017-02-13CVE-2016-8344: An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion…
PriorityP416low3.7CVSS 3.0
AVNACHPRNUINSUCNINAL
EPSS
1.55%
71.9th percentile
An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| honeywell | experion_process_knowledge_system | <= 311 | — |
| honeywell | experion_process_knowledge_system | <= 411 | — |
| honeywell | experion_process_knowledge_system | — | — |
| honeywell | experion_process_knowledge_system | — | — |
| honeywell | experion_process_knowledge_system | — | — |
CVSS provenance
nvdv3.03.7LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Honeywell Experion PKS Improper Input Validation Vulnerability
cisa_ics·2016-10-27
Honeywell Experion PKS Improper Input Validation Vulnerability
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Honeywell Experion PKS Improper Input Validation Vulnerability
Last RevisedOctober 27, 2016
Alert CodeICSA-16-301-01
## OVERVIEW
Honeywell reported a denial-of-service condition caused by an improper input validation vulnerability in Honeywell’s Experion Process Knowledge System (PKS) platform. Honeywell has produced patches to mitigate this vulnerability.
This vulnerability could be exploited remotely.
## AFFECTED PRODUCTS
The following Experion PKS versions are affected:
- Experion PKS, Release 3xx and prior,
- Experion PKS, Release 400,
- Experion PKS, Release 410,
- E
GHSA
GHSA-c85h-7cv2-rr9p: An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400,
ghsa_unreviewed·2022-05-14
CVE-2016-8344 [MEDIUM] CWE-20 GHSA-c85h-7cv2-rr9p: An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400,
An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-02-13
Published