The Patching Friars' AlmanacA calendar of CVE saints

July 13

Crit.IXHoly card for crit-ix, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 IX Crit.IX MANUS IN MACHINA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Crit.IX, Who Shook the Control Rooms

Patron of industrial control systems, proprietary protocols, and plants that never stop.

Life

In July 2023 Tom Gol of Armis revealed Crit.IX, a set of flaws in Honeywell's Experion distributed control systems (among them CVE-2023-22435). Some allowed, with crafted messages, code execution on the servers and controllers that run industrial processes. In control rooms, where a reboot is no light decision, bugs like these weigh double.

Prayer

O Saint Crit.IX, who touches the levers of real processes, protect our plants with separated networks and verified protocols. Amen.

How to celebrate

Celebrated by applying Honeywell's patches, segmenting the OT networks and keeping the controllers away from everyone else's.

An exposed control room, a plant at risk.

Technical record

Disclosed on
July 13 2023
CVE
CVE-2023-22435
CVSS
7.5
Product
Honeywell · Experion Server

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

Sources: armis.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.