Honeywell Experion PKS Improper Input Validation Vulnerability

CVEs (1)

Remediations

• Honeywell recommends that Experion users download and apply the appropriate patch to protect themselves from this vulnerability.
• Honeywell’s software downloads to resolve the vulnerabilities include the following: R400.8 HOTFIX1, R410.8 HOTFIX6, R430.5 HOTFIX1, and R431.2 HOTFIX2
• In the event that a patch is not yet available for a current Experion release, Honeywell recommends users either isolate the network traffic when using the client tools (eNAP Server service) or turn the eNAP Server service off when not uploading new firmware until a patch is available.
• Users can contact Honeywell technical support for registration and installation instructions for these patches at the following URLs: (https://www.honeywellprocess.com/en-US/support/pages/request-support.aspx)
• Users can contact Honeywell technical support for registration and installation instructions for these patches at the following URLs: (https://www.honeywellprocess.com/en-US/contact-us/pages/default.aspx)

Affected Vendors

Affected Products (5)