CVE-2023-3710: Printer web page invalid command execution
Published Sep 12, 2023
·Updated
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).
Credit
ByteHunter
Affected Software
4 affected components
Honeywell Pm43 Firmware<p10.19.050004
Honeywell PM43
All of the following
Honeywell Pm43 Firmware<p10.19.050004
Honeywell PM43
Event History
Sep 12, 2023
CVE Published
via MITRE·07:55 PM
Data Sourced
via MITRE·07:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Mar 14, 2024
Exploit Published
via ExploitDB·12:00 AM
Known Exploited
via ExploitDB·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-3710.
2
What is the severity of CVE-2023-3710?
CVE-2023-3710 has a severity rating of critical.
3
What is the affected software for CVE-2023-3710?
The affected software for CVE-2023-3710 is Honeywell PM43.
4
How does the vulnerability in Honeywell PM43 manifest?
The vulnerability in Honeywell PM43 manifests as an Improper Input Validation vulnerability, allowing Command Injection.
5
How can I fix the vulnerability in Honeywell PM43?
To fix the vulnerability in Honeywell PM43, update to the latest available firmware version of the printer, specifically MR19.5 (e.g. P10.19.050006).