GCVE - cpe:2.3:a:honeywell:experion_pks:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:experion_pks:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Honeywell (`98681534-528d-57d2-bf2a-17f1d63c09c9`)
Product	Experion Pks (`b27fbd2b-9f70-5028-ba8b-7922a34f878a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38399`	vulnerable	2026-06-08 05:32:56.020764	Honeywell Experion PKS and ACE Controllers Relative Path Traversal HIGH (7.5) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories. Published: 2022-10-28T01:19:02.691Z Updated: 2025-04-16T16:07:59.274Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38397`	vulnerable	2026-06-08 05:32:56.016458	Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type CRITICAL (10) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. Published: 2022-10-28T01:21:35.576Z Updated: 2025-04-16T16:07:44.758Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38395`	vulnerable	2026-06-08 05:32:56.009290	Honeywell Experion PKS and ACE Controllers Injection CRITICAL (9.1) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. Published: 2022-10-28T01:20:24.175Z Updated: 2025-04-16T16:07:52.218Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9189`	vulnerable	2026-06-08 05:06:11.059358	Details available Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version. Published: 2019-03-25T19:10:47.000Z Updated: 2024-08-06T13:40:23.163Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9187`	vulnerable	2026-06-08 05:06:11.058666	Details available Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version. Published: 2019-03-25T19:19:10.000Z Updated: 2024-08-06T13:40:24.531Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9186`	vulnerable	2026-06-08 05:06:11.057726	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5436`	vulnerable	2026-06-08 05:05:47.921165	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5435`	vulnerable	2026-06-08 05:05:47.919980	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.