Unrated severityNVD Advisory· Published Oct 28, 2022· Updated Apr 16, 2025

Honeywell Experion PKS and ACE Controllers Injection

CVE-2021-38395

Description

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Honeywell/Experion PKS C200llm-create
Honeywell/Experioncpe-rescue
Range: C200

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-21-278-04mitre
www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000