{"id":59508,"date":"2025-07-20T06:07:24","date_gmt":"2025-07-20T06:07:24","guid":{"rendered":""},"modified":"2025-08-30T18:30:43","modified_gmt":"2025-08-31T00:30:43","slug":"cve-2025-3947-integer-underflow-vulnerability-in-honeywell-experion-pks","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-3947-integer-underflow-vulnerability-in-honeywell-experion-pks\/","title":{"rendered":"CVE-2025-3947: Integer Underflow Vulnerability in Honeywell Experion PKS<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-3947 vulnerability is a critical flaw found in Honeywell’s Experion PKS, a leading-edge automation solution for industrial control and business management. The vulnerability exposes systems to potential data manipulation and denial of service attacks due to an integer underflow condition in its Control Data Access (CDA) component. The flaw affects significant products in the Experion lineup, posing a considerable risk to the integrity and availability of industrial control systems<\/a> worldwide. Given the critical role of these systems<\/a> in a variety of sectors, including manufacturing, energy, and utilities, the vulnerability could potentially have widespread impacts if left unaddressed.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-3947
\nSeverity: High (CVSS 8.2)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n