Approved changes feed: RSS · Atom

cpe:2.3:h:honeywell:c300:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductC300 (04f2e75a-3138-5dab-a34a-768e07dbe0be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5392 vulnerable 2026-06-08 06:19:43.515953 Details available
HIGH (7.5)
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2024-04-11T19:19:19.070Z
Updated: 2024-08-02T07:59:44.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26597 not_vulnerable 2026-06-08 05:57:40.169996 Controller DOS on sending error response
HIGH (7.5)
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T11:04:55.153Z
Updated: 2025-03-05T18:50:22.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25770 not_vulnerable 2026-06-08 05:56:10.509226 Controller stack overflow on decoding messages from the server
CRITICAL (9.8)
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:58.825Z
Updated: 2024-08-02T11:32:12.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25178 not_vulnerable 2026-06-08 05:56:08.637160 Controller design flaw - unsigned firmware
CRITICAL (9.8)
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:59:16.333Z
Updated: 2025-03-05T18:50:28.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24480 not_vulnerable 2026-06-08 05:56:05.572280 Controller stack overflow when decoding messages from the server
CRITICAL (9.8)
Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for recommendations on upgrading and versioning.
Published: 2023-07-13T10:57:46.879Z
Updated: 2025-03-05T18:50:43.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38399 not_vulnerable 2026-06-08 05:32:56.020893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38397 not_vulnerable 2026-06-08 05:32:56.016756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38395 not_vulnerable 2026-06-08 05:32:56.014015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.