PT-2023-7548 · Honeywell · Honeywell Pm43

Jinqi Lai · Publicado 2023-09-12 · Atualizado 2025-09-12 · CVE-2023-3712

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Honeywell PM43 versions prior to P10.19.050004

Description The issue affects the Honeywell PM43 printer, specifically the 32-bit, ARM-based printer web page modules, allowing privilege escalation due to files or directories being accessible to external parties.

Recommendations Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Exploit

Correção

LPE

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

BDU:2023-08603

CVE-2023-3712

Produtos afetados

Honeywell Pm43

Referências · 11

• 🔥 https://github.com/vpxuser/CVE-2023-3712-POC · Exploit
• https://hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004 · Nota
• https://osv.dev/vulnerability/CVE-2023-3712 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-08603 · Nota de Segurança
• https://twitter.com/CVEnew/status/1701691406535082416 · Publicação no Twitter
• https://t.me/cveNotify/135347 · Publicação no Telegram
• https://t.me/cvenotify/58072 · Publicação no Telegram
• https://honeywell.com/us/en/product-security · Nota
• https://hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A · Nota
• https://t.me/cibsecurity/70352 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-3712 · Nota de Segurança