CVE-2023-3710: Printer web page invalid command execution
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Honeywell PM43to a version that resolves this vulnerability.Fixed in MR19.5
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-3710.
What is the severity of CVE-2023-3710?
CVE-2023-3710 has a severity rating of critical.
What is the affected software for CVE-2023-3710?
The affected software for CVE-2023-3710 is Honeywell PM43.
How does the vulnerability in Honeywell PM43 manifest?
The vulnerability in Honeywell PM43 manifests as an Improper Input Validation vulnerability, allowing Command Injection.
How can I fix the vulnerability in Honeywell PM43?
To fix the vulnerability in Honeywell PM43, update to the latest available firmware version of the printer, specifically MR19.5 (e.g. P10.19.050006).