Lucene search
K

10 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.1 views

The vulnerability of the printer web page module (ARM) of Honeywell PM43, which allows a intruder to execute arbitrary commands

The vulnerability of the printer web page module ARM of Honeywell PM43 is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

9.9CVSS0.91703EPSS
Exploits4References5
NVD
NVD
added 2023/09/12 8:15 p.m.10 views

CVE-2023-3710

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...

9.9CVSS9.6AI score0.91703EPSS
Exploits4References3
NVD
NVD
added 2023/09/12 8:15 p.m.13 views

CVE-2023-3711

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...

8.8CVSS7AI score0.00139EPSS
Exploits0References3
Prion
Prion
added 2023/09/12 8:15 p.m.15 views

Session fixation

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...

6.8CVSS8.6AI score0.00139EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/12 7:59 p.m.14 views

CVE-2023-3712 Potential user privilege escalation

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version...

6.6CVSS7.9AI score0.00086EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/09/12 7:57 p.m.14 views

CVE-2023-3711 Potential Predictable Session ID

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...

6.4CVSS8.9AI score0.00139EPSS
Exploits0References3
CVE
CVE
added 2023/09/12 7:57 p.m.47 views

CVE-2023-3711

Honeywell PM43 industrial printers (32-bit ARM) are affected by CVE-2023-3711 through a Session Fixation vulnerability in the printer web page modules, enabling session credential falsification via prediction. The issue affects PM43 versions prior to P10.19.050004. Remediation per the connected d...

8.8CVSS8.3AI score0.00139EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 7:57 p.m.11 views

CVE-2023-3711 Potential Predictable Session ID

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5...

6.4CVSS8.3AI score0.00139EPSS
Exploits0References3
CVE
CVE
added 2023/09/12 7:55 p.m.70 views

CVE-2023-3710

The CVE-2023-3710 entry affects Honeywell PM43 printers (32‑bit ARM) and is due to Improper Input Validation in the printer web page modules, enabling Command Injection. Affected versions are PM43 before P10.19.050004; mitigation is to update to MR19.5 (e.g., P10.19.050006) or later firmware that...

9.9CVSS8.8AI score0.91703EPSS
In wildExploits4References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 7:55 p.m.11 views

CVE-2023-3710 Printer web page invalid command execution

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...

9.9CVSS8.8AI score0.91703EPSS
Exploits4References3
Rows per page
Query Builder