← Database

CVE-2021-38395

CRITICAL CVSS: 9.1 Published: 2022-10-28 Modified: 2026-06-17

Description

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

Affected Platforms

Honeywell C200E FirmwareHoneywell C300Honeywell C300 FirmwareHoneywell C200EHoneywell C200 FirmwareHoneywell Application Control EnvironmentHoneywell C200Honeywell Application Control Environment Firmware

Weakness Type

CWE-74, CWE-74

References