Vulnerability Description
A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Honeywell | Experion Process Knowledge System | >= r400, < r400.6 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01MitigationThird Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2014-5436?
CVE-2014-5436 is a vulnerability with a CVSS score of 7.5 (HIGH). A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information di...
How severe is CVE-2014-5436?
CVE-2014-5436 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-5436?
Check the references section above for vendor advisories and patch information. Affected products include: Honeywell Experion Process Knowledge System.