Approved changes feed: RSS · Atom

cpe:2.3:o:honeywell:c300_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductC300 Firmware (96478791-426f-5a56-afbd-5e059b4fc12a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26597 vulnerable 2026-06-08 05:57:40.168514 Controller DOS on sending error response
HIGH (7.5)
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T11:04:55.153Z
Updated: 2025-03-05T18:50:22.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25770 vulnerable 2026-06-08 05:56:10.509198 Controller stack overflow on decoding messages from the server
CRITICAL (9.8)
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:58.825Z
Updated: 2024-08-02T11:32:12.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25178 vulnerable 2026-06-08 05:56:08.637031 Controller design flaw - unsigned firmware
CRITICAL (9.8)
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:16.333Z
Updated: 2025-03-05T18:50:28.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24480 vulnerable 2026-06-08 05:56:05.571012 Controller stack overflow when decoding messages from the server
CRITICAL (9.8)
Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:57:46.879Z
Updated: 2025-03-05T18:50:43.950Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.