Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| C300_firmware | Honeywell | 501.1 (including) | 501.6hf8 (including) |
| C300_firmware | Honeywell | 510.1 (including) | 510.2hf12 (including) |
| C300_firmware | Honeywell | 511.1 (including) | 511.5tcu3 (including) |
| C300_firmware | Honeywell | 520.1 (including) | 520.1tcu4 (including) |
| C300_firmware | Honeywell | 520.2 (including) | 520.2tcu2 (including) |