CVE-2023-5389 - OpenCVE

An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files that could result in subsequent execution of a malicious application if triggered. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Honeywell	Controledge Unit Operations Controller Controledge Unit Operations Controller Firmware Controledge Virtual Unit Operations Controller Controledge Virtual Unit Operations Controller Firmware

Configuration 1 [-]

AND

cpe:2.3:o:honeywell:controledge_unit_operations_controller_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:honeywell:controledge_unit_operations_controller:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:honeywell:controledge_virtual_unit_operations_controller_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:honeywell:controledge_virtual_unit_operations_controller:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://process.honeywell.com
https://www.honeywell.com/us/en/product-security

History

No history.

MITRE

Status: PUBLISHED

Assigner: Honeywell

Published: 2024-01-30T20:00:50.382Z

Updated: 2024-08-02T07:59:44.048Z

Reserved: 2023-10-04T17:49:59.920Z

Link: CVE-2023-5389

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2024-01-30T20:15:45.420

Modified: 2024-02-08T15:20:04.057

Link: CVE-2023-5389

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-5389", "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "state": "PUBLISHED", "assignerShortName": "Honeywell", "dateReserved": "2023-10-04T17:49:59.920Z", "datePublished": "2024-01-30T20:00:50.382Z", "dateUpdated": "2024-08-02T07:59:44.048Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Experion PKS"], "product": "ControlEdge UOC", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "520.2 TCU4", "status": "affected", "version": "520.2", "versionType": "semver"}, {"lessThanOrEqual": "510.2 HF13", "status": "affected", "version": "510.1", "versionType": "semver"}, {"lessThanOrEqual": "520.1 TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "511.5 TCU4 HF3", "status": "affected", "version": "511.1", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["Experion LX"], "product": "ControlEdge UOC", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "520.2 TCU4", "status": "affected", "version": "520.2", "versionType": "semver"}, {"lessThanOrEqual": "511.5 TCU4 HF3", "status": "affected", "version": "511.1", "versionType": "semver"}, {"lessThanOrEqual": "520.1 TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["PlantCruise by Experion"], "product": "ControlEdge UOC", "vendor": "Honeywell", "versions": [{"lessThanOrEqual": "520.2 TCU4", "status": "affected", "version": "520.2", "versionType": "semver"}, {"lessThanOrEqual": "520.1 TCU4", "status": "affected", "version": "520.1", "versionType": "semver"}, {"lessThanOrEqual": "511.5 TCU4 HF3", "status": "affected", "version": "520.2 TCU4 HFR2", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\nAn attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files that could result in subsequent execution of a malicious application if triggered. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning. "}], "value": "\nAn attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files that could result in subsequent execution of a malicious application if triggered. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.\u00a0"}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-749", "description": "CWE-749", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "shortName": "Honeywell", "dateUpdated": "2024-04-25T16:54:14.096Z"}, "references": [{"url": "https://process.honeywell.com"}, {"url": "https://www.honeywell.com/us/en/product-security"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:59:44.048Z"}, "title": "CVE Program Container", "references": [{"url": "https://process.honeywell.com", "tags": ["x_transferred"]}, {"url": "https://www.honeywell.com/us/en/product-security", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:honeywell:controledge_unit_operations_controller_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B528F553-0D96-4A1D-9ABE-DA9555534BB2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:honeywell:controledge_unit_operations_controller:-:*:*:*:*:*:*:*", "matchCriteriaId": "E30EFCB6-6534-46EE-A743-2218FD0DAA81", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:honeywell:controledge_virtual_unit_operations_controller_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "67C0BF18-A928-4A47-A71E-2216BE4ECB90", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:honeywell:controledge_virtual_unit_operations_controller:-:*:*:*:*:*:*:*", "matchCriteriaId": "F436C92C-7EED-44A5-B53D-12B54652D0A1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "\nAn attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on configuration changes or updating of files that could result in subsequent execution of a malicious application if triggered. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning.\u00a0"}, {"lang": "es", "value": "Un atacante podr\u00eda explotar esta vulnerabilidad, lo que permitir\u00eda modificar archivos en Honeywell Experion VirtualUOC y UOC. Esta explotaci\u00f3n podr\u00eda usarse para escribir un archivo que puede resultar en un comportamiento inesperado basado en cambios de configuraci\u00f3n o actualizaci\u00f3n de archivos que podr\u00edan resultar en la ejecuci\u00f3n posterior de una aplicaci\u00f3n maliciosa si se activa. Honeywell recomienda actualizar a la versi\u00f3n m\u00e1s reciente del producto. Consulte la Notificaci\u00f3n de seguridad de Honeywell para obtener recomendaciones sobre actualizaci\u00f3n y control de versiones."}], "id": "CVE-2023-5389", "lastModified": "2024-02-08T15:20:04.057", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "psirt@honeywell.com", "type": "Secondary"}]}, "published": "2024-01-30T20:15:45.420", "references": [{"source": "psirt@honeywell.com", "tags": ["Product"], "url": "https://process.honeywell.com"}, {"source": "psirt@honeywell.com", "tags": ["Not Applicable"], "url": "https://www.honeywell.com/us/en/product-security"}], "sourceIdentifier": "psirt@honeywell.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-749"}], "source": "psirt@honeywell.com", "type": "Secondary"}]}