CVE-2023-3710

CRÍTICO 9.8CVE-2023-3710 · Published 12/09/2023 · updated 17/06/2026

En resumen

CVE-2023-3710 es una vulnerabilidad CRÍTICO (CVSS 9.8).
Probabilidad de explotación en los próximos 30 días (EPSS): 49.0%, mayor que el 98.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

References

hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004 · Permissions Required
hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A · Permissions Required
honeywell.com/us/en/product-security · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free