Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductExperion Process Knowledge System (7cba719f-0a1d-5199-a46c-b6b47cdb91cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5394 vulnerable 2026-06-08 06:19:43.520087 Details available
HIGH (7.4)
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2024-04-11T19:21:52.796Z
Updated: 2024-08-09T20:13:47.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8344 vulnerable 2026-06-08 05:08:14.134046 Details available
An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-06T02:20:30.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9189 vulnerable 2026-06-08 05:06:11.059394 Details available
Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
Published: 2019-03-25T19:10:47.000Z
Updated: 2024-08-06T13:40:23.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9187 vulnerable 2026-06-08 05:06:11.058705 Details available
Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
Published: 2019-03-25T19:19:10.000Z
Updated: 2024-08-06T13:40:24.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9186 vulnerable 2026-06-08 05:06:11.058285 Details available
A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
Published: 2019-04-08T15:09:55.000Z
Updated: 2024-08-06T13:40:24.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5436 vulnerable 2026-06-08 05:05:47.921203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5435 vulnerable 2026-06-08 05:05:47.920763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.