PT-2024-37751 · Honeywell · Honeywell Pc42D+1

Published 2024-07-29 · Updated 2024-07-30 · CVE-2024-6620

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Honeywell PC42t, PC42tp, and PC42d Printers versions T10.19.020016 through T10.20.060397

Description The issue allows an attacker to inject malicious code, potentially leading to information disclosure, session theft, or client-side request forgery.

Recommendations For Honeywell PC42t, PC42tp, and PC42d Printers versions T10.19.020016 through T10.20.060397, update to PC42 Printer Firmware Version 20.6 T10.20.060398 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

CWE-602

Related Identifiers

CVE-2024-6620

Affected Products

Honeywell Pc42D

Honeywell Pc42T

References · 3

• https://sps.honeywell.com/us/en/support/productivity/cyber-security-notifications · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6620 · Security Note
• https://t.me/cvedetector/1919 · Telegram Post