CVE-2023-23585

Server DoS due to heap overflow

HIGH

7.5

CVSS Score

Published: July 13, 2023 at 10:54 AM UTC

Updated: June 17, 2026 at 05:37 AM UTC

4 products affected across 1 vendorExperion ServerExperion StationEngineering Station

Using Experion Server by Honeywell?

Get instant alerts when new vulnerabilities affect Experion Server - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.7%

SSVC

No known exploit

Description

Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Direct Station · Honeywell

95%

510.1 ≤ v ≤ 511.5tcu3510.5 ≤ v ≤ 511.5TCU3520.1 ≤ v ≤ 520.1TCU4520.1 ≤ v ≤ 520.1tcu4520.2 ≤ v ≤ 520.2TCU2520.2 ≤ v ≤ 520.2tcu2510.5 520.1 520.2

Engineering Station · Honeywell

95%

510.1 ≤ v ≤ 511.5TCU3510.1 ≤ v ≤ 511.5tcu3520.1 ≤ v ≤ 520.1TCU4520.1 ≤ v ≤ 520.1tcu4520.2 ≤ v ≤ 520.2TCU2520.2 ≤ v ≤ 520.2tcu2510.1 520.1 520.2

Experion Server · Honeywell

95%

501.1 ≤ v ≤ 501.6HF8501.1 ≤ v ≤ 501.6hf8510.1 ≤ v ≤ 510.2HF12510.1 ≤ v ≤ 510.2hf12511.1 ≤ v ≤ 511.5TCU3511.1 ≤ v ≤ 511.5tcu3520.1 ≤ v ≤ 520.1TCU4520.1 ≤ v ≤ 520.1tcu4520.2 ≤ v ≤ 520.2TCU2520.2 ≤ v ≤ 520.2tcu2501.1 510.1 511.1 520.1 520.2

Experion Station · Honeywell

95%