Critical severity · published Oct 28, 2022
CVE-2021-38395
Honeywell Experion PKS and ACE Controllers Injection
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Experion PKS · Honeywell
C200; C200E; C300; ACE controllers · source: vendor
AC
Application Control Environment Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200 Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200e Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C300 Firmware · Honeywell
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-38395
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-38395
Mitigation
https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
Product
https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf
More from Experion PKS
10.0
CVE-2021-38397
Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type
7.5
CVE-2021-38399
Honeywell Experion PKS and ACE Controllers Relative Path Traversal