Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Honeywell PC23/43, PD43, PD45, PX240 and 8 more products A10.19.050004, B10.19.050004 and 8 more versions Clear all filters
TI-2023-03468 CVE-2023-3712 · GHSA-cwj7-4q2c-hmxj

Potential user privilege escalation

Priority LOW 35

Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00552 Published 2023-09-12 Fixed in P10.19.050004, K10.19.050004 +8 CWE-552
TI-2023-03467 CVE-2023-3711 · GHSA-4whc-qj2p-c6pg

Potential Predictable Session ID

Priority MEDIUM 40

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01034 Published 2023-09-12 Fixed in P10.19.050004, K10.19.050004 +8 CWE-384
TI-2023-03466 CVE-2023-3710 · GHSA-9mq5-f7mh-w3xc

Printer web page invalid command execution

Priority HIGH 79

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.4904 Published 2023-09-12 Fixed in P10.19.050004, K10.19.050004 +8 CWE-20