Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).
History

Tue, 12 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Honeywell pc23 43
Honeywell pd43
Honeywell pm23 43
Honeywell pm42
Honeywell pm45
Honeywell px240
Honeywell px45
Honeywell px45 65
Honeywell px4ie 6ie
Honeywell px940
Honeywell rp2f Rp4f
CPEs cpe:2.3:a:honeywell:pc23_43:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:pd43:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:pm23_43:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:pm42:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:pm45:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:px240:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:px45:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:px45_65:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:px4ie_6ie:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:px940:*:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:rp2f_rp4f:*:*:*:*:*:*:*:*
Vendors & Products Honeywell pc23 43
Honeywell pd43
Honeywell pm23 43
Honeywell pm42
Honeywell pm45
Honeywell px240
Honeywell px45
Honeywell px45 65
Honeywell px4ie 6ie
Honeywell px940
Honeywell rp2f Rp4f
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Honeywell

Published: 2023-09-12T19:55:41.805Z

Updated: 2024-11-12T15:13:06.021Z

Reserved: 2023-07-17T13:59:22.320Z

Link: CVE-2023-3710

cve-icon Vulnrichment

Updated: 2024-08-02T07:01:57.525Z

cve-icon NVD

Status : Modified

Published: 2023-09-12T20:15:09.387

Modified: 2024-11-21T08:17:53.760

Link: CVE-2023-3710

cve-icon Redhat

No data.