CVE-2023-51602 is an XML External Entity (XXE) information disclosure vulnerability affecting Honeywell Saia PG5 Controls Suite. This flaw allows remote attackers to disclose sensitive information by crafting a malicious XML file that, when opened by a user, causes the XML parser to access and embed external URI contents. The vulnerability has a CVSS score of 6.5 (Medium), requiring user interaction (UI:R) and having a high confidentiality impact (C:H). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:honeywell:saia_pg5_controls_suite:-:*:*:*:*:*:*:* | ||
2.3.193CPE matchmatch criteria | cpe:2.3:a:honeywell:saia_pg5_controls_suite:2.3.193:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Multiple Vulnerabilities in Saia Burgess PG5 Controls Suite
Sep 10, 2025Multiple Vulnerabilities in Saia Burgess PG5 Controls Suite
Sep 10, 2025Multiple Vulnerabilities in Saia Burgess PG5 Controls Suite
Sep 10, 2025