Honeywell Experion PKS, LX and PlantCruise

Risk Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow privilege escalation or allow remote code execution.

CVEs (9)

Remediations

• Honeywell recommends users upgrade Experion Platforms to version R520.2. Download information includes the following:
• Experion PKS: Update to version R520.2
• Experion LX: Update to version R520.2
• Experion PlantCruise: Update to version R520.2
• Go to the Honeywell Website and sign in.
• Select "Support" at the top of the web page.
• Select "Product Documents & Downloads."
• In the given search box, search for: "Experion PKS R520.2", "Experion LX R520.2" or "Experion PlantCruise R520.2" and select the hyperlink for the given Experion platform.
• Honeywell advises users to follow security best practices for Experion platform environments to ensure access is limited to authorized users only. Users should ensure the backup files are maintained in a network location or physical drive with access limited to authorized users only and should not share them.Honeywell Security Notifications are available on the Honeywell website. For access, users should visit the Honeywell Website and sign in, select the search icon at the top of the web page, and search for "SN2023-06-22".

Affected Vendors

Affected Products (3)

Affected Sectors

Multiple