Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers

guest · Oct 6, 2021

Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers
October 6, 2021
https://thehackernews.com/2021/10/multiple-critical-flaws-discovered-in.html

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released an advisory regarding multiple security vulnerabilities affecting all versions of Honeywell Experion Process Knowledge System C200, C200E, C300, and ACE controllers that could be exploited to achieve remote code execution and denial-of-service (DoS) conditions.

"A Control Component Library (CCL) may be modified by a bad actor and loaded to a controller such that malicious code is executed by the controller," Honeywell noted in an independent security notification published earlier this February. Credited with discovering and reporting the flaws are Rei Henigman and Nadav Erez of industrial cybersecurity firm Claroty.
Click to expand...

The list of three flaws is as follows -

CVE-2021-38397 (CVSS score: 10.0) - Unrestricted Upload of File with Dangerous Type

CVE-2021-38395 (CVSS score: 9.1) - Improper Neutralization of Special Elements in Output Used by a Downstream Component

CVE-2021-38399 (CVSS score: 7.5) - Relative Path Traversal

Click to expand...

According to Claroty, the issues hinge on the download code procedure that's essential to program the logic running in the controller, thus enabling an attacker to mimic the process and upload arbitrary CLL binary files. "The device then loads the executables without performing checks or sanitization, giving an attacker the ability to upload executables and run unauthorized native code remotely without authentication," researchers Henigman and Erez said.
Click to expand...

Honeywell: Target DCS: Finding, Fixing Critical Bugs in Honeywell Experion PKS

Executive Summary

• Claroty’s Team82 researchers today disclose some details about three vulnerabilities reported to Honeywell International in its Honeywell Experion Process Knowledge System (PKS) distributed control system (DCS).
• The vulnerabilities could allow an attacker to modify a Control Component Library (CCL) and load it to a controller, which would then execute malicious code. Denial-of-service attacks are also possible.
•The vulnerabilities affect all versions of the C200, C200E, C300, and ACE controllers and simulators.
• An attacker could use the vulnerabilities to execute native code on the system, modify process values, or disrupt critical processes.
• Honeywell has addressed these vulnerabilities and issued an advisory. Users are urged to update or patch as soon as possible.
• ICS-CERT published an advisory today, and rated the vulnerabilities collectively, a 10.0, the highest criticality CVSS score
Click to expand...

guest · Oct 6, 2021

CISA Releases Security Advisory for Honeywell Experion and ACE Controllers
October 5, 2021
https://us-cert.cisa.gov/ncas/curre...-security-advisory-honeywell-experion-and-ace

CISA has released an Industrial Controls Systems (ICS) advisory detailing multiple vulnerabilities affecting all versions of Honeywell Experion Process Knowledge System C200, C200E, C300, and ACE controllers. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review ICS advisory ICSA-21-278-04 Honeywell Experion and ACE Controllers as well as Experion Network and Security Planning Guide and Honeywell Support document SN2021-02-22-01 for more information and apply the necessary mitigations.
Click to expand...

Log in or Sign up

Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers

guest Guest

guest Guest

Log in or Sign up

Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers

guest Guest

guest Guest

Useful Searches