CVE-2017-5671
First published: Wed Mar 29 2017(Updated: )
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Honeywell Intermec Pc23 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pc42 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pc43 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pd43 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pm23 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pm42 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pm43 Firmware | <=10.10.011406 | |
| Honeywell Intermec Pc23 | ||
| Honeywell Intermec Pc42 | ||
| Honeywell Intermec Pc43 | ||
| Honeywell Intermec Pd43 | ||
| Honeywell Intermec PM23 | ||
| Honeywell Intermec Pm42 | ||
| Honeywell Intermec Pm43 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf
- http://www.securityfocus.com/bid/97236
- https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/
- https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf
- https://www.exploit-db.com/exploits/41754/
- collector/nvd-index
- vendor/honeywell
- canonical/honeywell intermec pc23 firmware
- version/honeywell intermec pc23 firmware/10.10.011406
- canonical/honeywell intermec pc42 firmware
- version/honeywell intermec pc42 firmware/10.10.011406
- canonical/honeywell intermec pc43 firmware
- version/honeywell intermec pc43 firmware/10.10.011406
- canonical/honeywell intermec pd43 firmware
- version/honeywell intermec pd43 firmware/10.10.011406
- canonical/honeywell intermec pm23 firmware
- version/honeywell intermec pm23 firmware/10.10.011406
- canonical/honeywell intermec pm42 firmware
- version/honeywell intermec pm42 firmware/10.10.011406
- canonical/honeywell intermec pm43 firmware
- version/honeywell intermec pm43 firmware/10.10.011406
- canonical/honeywell intermec pc23
- canonical/honeywell intermec pc42
- canonical/honeywell intermec pc43
- canonical/honeywell intermec pd43
- canonical/honeywell intermec pm23
- canonical/honeywell intermec pm42
- canonical/honeywell intermec pm43