CVE:CVE-2021-38397
CNNVD:CNNVD-202110-231
Honeywell Experion PKS和Honeywell Ace Controllers都是美国霍尼韦尔（Honeywell）公司的产品。Honeywell Experion PKS是一个过程自动化系统。Honeywell Ace Controllers是用于在服务器级计算机平台上执行 Honeywell 的控制执行环境 (Cee)。
Honeywell Experion PKS 和 ACE Controllers存在代码问题漏洞，该漏洞源于文件上载过程中文件验证不足。攻击者可利用该漏洞上载恶意文件并在服务器上执行。
solution:Upgrade honeywell c200_firmware to a higher version than -; Upgrade honeywell c200e_firmware to a higher version than -; Upgrade honeywell c300_firmware to a higher version than -; Upgrade honeywell application_control_environment_firmware to a higher version than -