Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:c300:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductC300 (04f2e75a-3138-5dab-a34a-768e07dbe0be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5407 vulnerable 2026-06-08 06:19:43.535940 Details available
MEDIUM (5.9)
Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2024-04-17T16:49:16.900Z
Updated: 2024-08-08T15:49:07.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5392 vulnerable 2026-06-08 06:19:43.516850 Details available
HIGH (7.5)
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2024-04-11T19:19:19.070Z
Updated: 2024-08-02T07:59:44.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26597 vulnerable 2026-06-08 05:57:40.167289 Controller DOS on sending error response
HIGH (7.5)
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T11:04:55.153Z
Updated: 2025-03-05T18:50:22.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25770 vulnerable 2026-06-08 05:56:10.509168 Controller stack overflow on decoding messages from the server
CRITICAL (9.8)
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:58.825Z
Updated: 2024-08-02T11:32:12.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25178 vulnerable 2026-06-08 05:56:08.636996 Controller design flaw - unsigned firmware
CRITICAL (9.8)
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:16.333Z
Updated: 2025-03-05T18:50:28.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24480 vulnerable 2026-06-08 05:56:05.570254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.