Security News > 2023 > July > Armis, Honeywell Uncover Vulnerabilities in Honeywell Systems

Newly discovered vulnerabilities in distributed control systems could allow attackers access to systems supporting industrial, energy, chemical and other operations.

Security company Armis, in collaboration with operational technology company Honeywell, identified new vulnerabilities in Honeywell Experion distributed control system platforms.

These vulnerabilities could potentially allow remote execution of malware on Honeywell servers and controllers, the companies said.

In May 2022, Armis confirmed with Honeywell that the Experion C300 controller and servers have 13 code issues, constituting nine new vulnerabilities, seven of which are critical, according to Gol.

"Due to the severity of these vulnerabilities and the impact, Honeywell and Armis have been working together to investigate these findings, understand the underlying issues, and work towards a patch," Gol wrote, adding that Honeywell has made available security patches and strongly advised all affected customers to apply these patches immediately.

The Armis research team said that due to the severity of these vulnerabilities and their impact, Honeywell and Armis have been working together to investigate these findings, understand the underlying issues and develop patches.

News URL

https://www.techrepublic.com/article/armis-honeywell-vulnerabilities/