High severity · published Oct 28, 2022
CVE-2021-38399
Honeywell Experion PKS and ACE Controllers Relative Path Traversal
7.5
CVSS
0.9%
EPSS
No
On KEV
Description
Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Experion PKS · Honeywell
C200; C200E; C300; ACE controllers · source: vendor
AC
Application Control Environment Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200 Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C200e Firmware · Honeywell
All versions, or not specified · source: NVD
CF
C300 Firmware · Honeywell
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-38399
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-38399
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
Product
https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf
More from Experion PKS
10.0
CVE-2021-38397
Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type
9.8
CVE-2021-38395
Honeywell Experion PKS and ACE Controllers Injection