CVE-2017-5671
First published: Wed Mar 29 2017(Updated: )
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Honeywell Intermec Pc23 | <=10.10.011406 | |
| Honeywell Intermec Pc42 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pc43 | <=10.10.011406 | |
| Honeywell Intermec Pd43 | <=10.10.011406 | |
| Honeywell Intermec PM23 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pm42 Firmware | <=10.10.011406 | |
| Honeywell PM43 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pc23 Firmware | ||
| Honeywell Intermec Pc42 Firmware | ||
| Honeywell Intermec Pc43 Firmware | ||
| Honeywell Intermec Pd43 Firmware | ||
| Honeywell Intermec PM23 Firmware | ||
| Honeywell Intermec Pm42 Firmware | ||
| Honeywell PM43 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf
- http://www.securityfocus.com/bid/97236
- https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/
- https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf
- https://www.exploit-db.com/exploits/41754/
- agent/type
- agent/event
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/tags
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- vendor/honeywell
- canonical/honeywell intermec pc23
- version/honeywell intermec pc23/10.10.011406
- canonical/honeywell intermec pc42 firmware
- version/honeywell intermec pc42 firmware/10.10.011406
- canonical/honeywell intermec pc43
- version/honeywell intermec pc43/10.10.011406
- canonical/honeywell intermec pd43
- version/honeywell intermec pd43/10.10.011406
- canonical/honeywell intermec pm23 firmware
- version/honeywell intermec pm23 firmware/10.10.011406
- canonical/honeywell intermec pm42 firmware
- version/honeywell intermec pm42 firmware/10.10.011406
- canonical/honeywell pm43 firmware
- version/honeywell pm43 firmware/10.10.011406
- canonical/honeywell intermec pc23 firmware
- canonical/honeywell intermec pc43 firmware
- canonical/honeywell intermec pd43 firmware
- canonical/honeywell pm43