What is CVE-2014-5436?

CVE-2014-5436 is a high-severity vulnerability in Honeywell Experion Pks, classified under Path Traversal. CVSS score: 7.5/10. Published 2019-04-08.

How severe is CVE-2014-5436?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Honeywell Experion Pks

CVE-2014-5436

A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.031 (86.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Honeywell Experion Pks — versions R41x before R410.6, R43x before R430.2, R40x before R400.6
Honeywell Experion_process_knowledge_system

Weakness classification (CWE)

CWE-22 — Path Traversal

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2014-5436?: CVE-2014-5436 is a high-severity vulnerability in Honeywell Experion Pks, classified under Path Traversal. CVSS score: 7.5/10. Published 2019-04-08.
How severe is CVE-2014-5436?: High severity. CVSS v3 base score is 7.5 out of 10.