← Database

CVE-2021-38397

CRITICAL CVSS: 10.0 Published: 2022-10-28 Modified: 2026-06-17

Description

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

Affected Platforms

Honeywell C200E FirmwareHoneywell C300Honeywell C300 FirmwareHoneywell C200EHoneywell C200 FirmwareHoneywell Application Control EnvironmentHoneywell C200Honeywell Application Control Environment Firmware

Weakness Type

CWE-434, CWE-434

References