Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-2520

Dereferencing of an uninitialized pointer leads to denial of service.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Honeywell

Description

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to a denial of service. Honeywell recommends updating to the most recent version of Honeywell Experion PKS: 520.2 TCU9 HF1and 530.1 TCU3 HF1. The affected Experion PKS products are C300 PCNT02, EHB, EHPM, ELMM, Classic ENIM, ETN, FIM4, FIM8, PGM, and RFIM. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Honeywell C300 PCNT02

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell EHB

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell EHPM

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell ELMM

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell Classic ENIM

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell ETN

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell FIM4

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell FIM8

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell PGM

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

Honeywell RFIM

Default version status: unaffected

  • 520.1 to ≤ 520.2 TCU9affected
  • 530 to ≤ 530 TCU3affected

References