Vulnerabilities > CVE-2023-3712 - Files or Directories Accessible to External Parties vulnerability in Honeywell Pm43 Firmware

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
honeywell
CWE-552
NVD
Published: 2023-09-12
Updated: 2023-09-19

Summary

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.  Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Vulnerable Configurations

Part Description Count
OS
Honeywell
1
Hardware
Honeywell
1

Common Weakness Enumeration (CWE)

References