Critical severity · published Oct 28, 2022
CVE-2021-38397
Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type
10.0
CVSS
1.2%
EPSS
No
On KEV
Description
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Experion PKS · Honeywell
C200; C200E; C300; ACE controllers · source: vendor
AC
Application Control Environment Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200 Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200e Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C300 Firmware · Honeywell
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-38397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-38397
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
Product
https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf
More from Experion PKS
9.8
CVE-2021-38395
Honeywell Experion PKS and ACE Controllers Injection
7.5
CVE-2021-38399
Honeywell Experion PKS and ACE Controllers Relative Path Traversal