GCVE - cpe:2.3:a:honeywell:saia_pg5_controls_suite:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:honeywell:saia_pg5_controls_suite:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Honeywell (`98681534-528d-57d2-bf2a-17f1d63c09c9`)
Product	Saia Pg5 Controls Suite (`11b7f17b-40ac-5203-8631-0a5b2fad99df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-51605`	vulnerable	2026-06-08 06:17:53.592391	Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability MEDIUM (5.5) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XML files. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process. . Was ZDI-CAN-18644. Published: 2024-05-03T02:15:31.381Z Updated: 2024-09-18T18:30:48.470Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1854/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51604`	vulnerable	2026-06-08 06:17:53.591828	Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability MEDIUM (5.5) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XML files. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process. . Was ZDI-CAN-18593. Published: 2024-05-03T02:15:30.665Z Updated: 2024-09-18T18:30:47.737Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1853/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51603`	vulnerable	2026-06-08 06:17:53.591190	Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability HIGH (7.8) Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CAB files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. . Was ZDI-CAN-18592. Published: 2024-05-03T02:15:29.933Z Updated: 2024-09-18T18:30:47.006Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1852/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51602`	vulnerable	2026-06-08 06:17:53.590651	Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability MEDIUM (5.5) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XML files. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process. . Was ZDI-CAN-18591. Published: 2024-05-03T02:15:29.225Z Updated: 2024-09-18T18:30:46.275Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1851/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51601`	vulnerable	2026-06-08 06:17:53.590303	Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability MEDIUM (5.5) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of xml files. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process. . Was ZDI-CAN-18563. Published: 2024-05-03T02:15:28.512Z Updated: 2024-09-18T18:30:45.526Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1850/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51600`	vulnerable	2026-06-08 06:17:53.589798	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-51599`	vulnerable	2026-06-08 06:17:53.586215	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30320`	vulnerable	2026-06-08 05:43:37.943971	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30319`	vulnerable	2026-06-08 05:43:37.943449	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.