Experion lx

This hub aggregates every CVE we track for Experion lx, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Experion lx.

• CVE-2023-25948Server Data type confusion - info leak 7.5Jul 13, 2023
• CVE-2023-26597Controller DOS on sending error response7.5Jul 13, 2023
• CVE-2023-25770Controller stack overflow on decoding messages from the server9.8Jul 13, 2023
• CVE-2023-25178Controller design flaw - unsigned firmware9.8Jul 13, 2023
• CVE-2023-25078DoS due to heap overflow9.8Jul 13, 2023
• CVE-2023-24480Controller stack overflow when decoding messages from the server9.8Jul 13, 2023
• CVE-2023-24474Server deserialization missing boundary checks - heap overflow in communication between server and controller7.5Jul 13, 2023
• CVE-2023-23585Server DoS due to heap overflow9.8Jul 13, 2023
• CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver7.5Jul 13, 2023
• CVE-2022-30317Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experion LX Control Data Access (CDA) EpicMo protocol ...9.1Aug 31, 2022