Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-3710

Printer web page invalid command execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Honeywell

Description

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Honeywell PM23/43

Default version status: unaffected

  • 0 to < P10.19.050004affected

Honeywell PC23/43, PD43

Default version status: unaffected

  • 0 to < K10.19.050004affected

Honeywell PM42

Default version status: unaffected

  • 0 to < T10.19.050004affected

Honeywell PM42

Default version status: unaffected

  • 0 to < L10.19.050004affected

Honeywell PX4ie/6ie

Default version status: unaffected

  • 0 to < A10.19.050004affected

Honeywell PX45/65

Default version status: unaffected

  • 0 to < B10.19.050004affected

Honeywell PD45, PX240

Default version status: unaffected

  • 0 to < F10.19.050004affected

Honeywell PX940

Default version status: unaffected

  • 0 to < H10.19.050004affected

Honeywell PM45

Default version status: unaffected

  • 0 to < J10.19.050004affected

Honeywell RP2f/RP4f

Default version status: unaffected

  • 0 to < M10.19.050006affected

References