Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-3712

Potential user privilege escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Honeywell

Description

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.  Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Honeywell PM23/43

Default version status: unaffected

  • 0 to < P10.19.050004affected

Honeywell PC23/43, PD43

Default version status: unaffected

  • 0 to < K10.19.050004affected

Honeywell PM42

Default version status: unaffected

  • 0 to < T10.19.050004affected

Honeywell PM42

Default version status: unaffected

  • 0 to < L10.19.050004affected

Honeywell PX4ie/6ie

Default version status: unaffected

  • 0 to < A10.19.050004affected

Honeywell PX45/65

Default version status: unaffected

  • 0 to < B10.19.050004affected

Honeywell PD45, PX240

Default version status: unaffected

  • 0 to < F10.19.050004affected

Honeywell PX940

Default version status: unaffected

  • 0 to < H10.19.050004affected

Honeywell PM45

Default version status: unaffected

  • 0 to < J10.19.050004affected

Honeywell RP2f/RP4f

Default version status: unaffected

  • 0 to < M10.19.050006affected

References