Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.7

Honeywell Experion PKS may crash, blocking firmware updates

CVE-2016-8344 · published 9 years ago
Summary

The Experion Process Knowledge System (versions 3xx, 400, 410, 430, and 431) can be tricked by malformed network data into stopping its process. If this occurs, the system cannot upload new firmware to Series-C devices, potentially interrupting normal operations. Apply the vendor's latest patch or update to a protected version as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
honeywell experion_process_knowledge_system <= 311
410
430
431
<= 411
cpe:2.3:a:honeywell:experion_process_knowledge_system:*:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Relea...
An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410, Experion PKS, Release 430, and Experion PKS, Release 431. Experion PKS does not properly validate input. By sending a specially crafted packet, an attacker could cause the process to terminate. A successful exploit would prevent firmware uploads to the Series-C devices.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
3.7 Low
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published13 Feb 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-8344 · NVD
Track software like this
Free during beta