Overview
The CVE-2025-3947 vulnerability is a critical flaw found in Honeywell’s Experion PKS, a leading-edge automation solution for industrial control and business management. The vulnerability exposes systems to potential data manipulation and denial of service attacks due to an integer underflow condition in its Control Data Access (CDA) component. The flaw affects significant products in the Experion lineup, posing a considerable risk to the integrity and availability of industrial control systems worldwide. Given the critical role of these systems in a variety of sectors, including manufacturing, energy, and utilities, the vulnerability could potentially have widespread impacts if left unaddressed.
Vulnerability Summary
CVE ID: CVE-2025-3947
Severity: High (CVSS 8.2)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Potential system compromise or data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
Experion PKS C300 PCNT02 | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS C300 PCNT05 | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS FIM4 | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS FIM8 | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS UOC | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS CN100 | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS HCA | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS C300PM | 520.1 – 520.2 TCU9, 530 – 530 TCU3
Experion PKS C200E | 520.1 – 520.2 TCU9, 530 – 530 TCU3
How the Exploit Works
The CVE-2025-3947 exploit takes advantage of an integer underflow vulnerability in the CDA component of Honeywell’s Experion PKS. This vulnerability occurs when the system performs insufficient checks on integer data values during subtraction, allowing an attacker to manipulate input data values. This can lead to a denial of service, disrupting system functionality and potentially allowing unauthorized access or data leakage.
Conceptual Example Code
Here’s an abstracted example of how an attacker might attempt to exploit this vulnerability:
$ curl -X POST http://target.example.com/vulnerable_endpoint \
-H "Content-Type: application/json" \
-d '{"data_value": "-2147483649"}'In this example, the attacker sends a POST request with a malicious payload. If the system doesn’t properly handle negative integers, it could trigger an integer underflow, causing the system to behave unpredictably or crash, leading to a potential denial of service.