← Back to home
ICSA-21-278-04  ·  Published 2021-10-05  ·  View on CISA ICS-CERT ↗

Honeywell Experion PKS and ACE Controllers

CVSS 10.0 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could lead to remote code execution and denial-of-service conditions.

Remediations

  • Honeywell recommends users follow all guidance in the Experion Network and Security Planning Guide to prevent attacks by malicious actors.
  • Additional information can be found in Honeywell Support document SN2021-02-22-01.

Affected Vendors

Honeywell

Affected Products (3)

Honeywell · C200 vers:all/*
Honeywell · C200E vers:all/*
Honeywell · C300 and ACE controllers vers:all/*

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more