{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-3712", "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "state": "PUBLISHED", "assignerShortName": "Honeywell", "dateReserved": "2023-07-17T13:59:27.158Z", "datePublished": "2023-09-12T19:59:00.396Z", "dateUpdated": "2024-09-25T15:19:21.057Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Printer web page"], "platforms": ["32 bit"], "product": "PM23/43", "vendor": "Honeywell", "versions": [{"lessThan": "P10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PC23/43, PD43", "vendor": "Honeywell ", "versions": [{"lessThan": "K10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PM42", "vendor": "Honeywell", "versions": [{"lessThan": "T10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PM42", "vendor": "Honeywell", "versions": [{"lessThan": "L10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PX4ie/6ie", "vendor": "Honeywell", "versions": [{"lessThan": "A10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PX45/65", "vendor": "Honeywell", "versions": [{"lessThan": "B10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PD45, PX240", "vendor": "Honeywell", "versions": [{"lessThan": "F10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PX940", "vendor": "Honeywell", "versions": [{"lessThan": "H10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "PM45", "vendor": "Honeywell", "versions": [{"lessThan": "J10.19.050004", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "platforms": ["32 bit"], "product": "RP2f/RP4f", "vendor": "Honeywell", "versions": [{"lessThan": "M10.19.050006", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.<p>This issue affects PM43 versions prior to P10.19.050004.&nbsp;\n\nUpdate to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).</p>"}], "value": "Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.\u00a0\n\nUpdate to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).\n\n"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "shortName": "Honeywell", "dateUpdated": "2023-09-12T19:59:00.396Z"}, "references": [{"url": "https://www.honeywell.com/us/en/product-security"}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004"}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A"}], "source": {"discovery": "EXTERNAL"}, "title": "Potential user privilege escalation", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:01:57.520Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.honeywell.com/us/en/product-security", "tags": ["x_transferred"]}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004", "tags": ["x_transferred"]}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-25T14:54:07.219279Z", "id": "CVE-2023-3712", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T15:19:21.057Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.honeywell.com/us/en/product-security", "tags": ["x_transferred"]}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004", "tags": ["x_transferred"]}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T07:01:57.520Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-3712", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-25T14:54:07.219279Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T15:19:17.795Z"}}], "cna": {"title": "Potential user privilege escalation", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Honeywell", "modules": ["Printer web page"], "product": "PM23/43", "versions": [{"status": "affected", "version": "0", "lessThan": "P10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell ", "product": "PC23/43, PD43", "versions": [{"status": "affected", "version": "0", "lessThan": "K10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PM42", "versions": [{"status": "affected", "version": "0", "lessThan": "T10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PM42", "versions": [{"status": "affected", "version": "0", "lessThan": "L10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PX4ie/6ie", "versions": [{"status": "affected", "version": "0", "lessThan": "A10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PX45/65", "versions": [{"status": "affected", "version": "0", "lessThan": "B10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PD45, PX240", "versions": [{"status": "affected", "version": "0", "lessThan": "F10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PX940", "versions": [{"status": "affected", "version": "0", "lessThan": "H10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "PM45", "versions": [{"status": "affected", "version": "0", "lessThan": "J10.19.050004", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}, {"vendor": "Honeywell", "product": "RP2f/RP4f", "versions": [{"status": "affected", "version": "0", "lessThan": "M10.19.050006", "versionType": "semver"}], "platforms": ["32 bit"], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.honeywell.com/us/en/product-security"}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004"}, {"url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.\u00a0\n\nUpdate to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).\n\n", "supportingMedia": [{"type": "text/html", "value": "Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.<p>This issue affects PM43 versions prior to P10.19.050004.&nbsp;\n\nUpdate to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-552", "description": "CWE-552 Files or Directories Accessible to External Parties"}]}], "providerMetadata": {"orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "shortName": "Honeywell", "dateUpdated": "2023-09-12T19:59:00.396Z"}}}, "cveMetadata": {"cveId": "CVE-2023-3712", "state": "PUBLISHED", "dateUpdated": "2024-09-25T15:19:21.057Z", "dateReserved": "2023-07-17T13:59:27.158Z", "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d", "datePublished": "2023-09-12T19:59:00.396Z", "assignerShortName": "Honeywell"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:honeywell:pm43_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8838609-3252-452F-A122-F454379006BA", "versionEndExcluding": "p10.19.050004", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:honeywell:pm43:-:*:*:*:*:*:x86:*", "matchCriteriaId": "C5F24450-6D4D-4F32-A2E3-E06EA0466CD7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004.\u00a0\n\nUpdate to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).\n\n"}, {"lang": "es", "value": "Vulnerabilidad de Archivos o Directorios Accesibles a Partes Externas en Honeywell PM43 en 32 bits, ARM (M\u00f3dulos de p\u00e1gina web de impresora) permite la escalada de privilegios. Este problema afecta a las versiones de PM43 anteriores a P10.19.050004. Actualice a la \u00faltima versi\u00f3n de firmware disponible de las respectivas impresoras a la versi\u00f3n MR19.5 (por ejemplo, P10.19.050006)."}], "id": "CVE-2023-3712", "lastModified": "2024-11-21T08:17:54.080", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 4.7, "source": "psirt@honeywell.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-12T20:15:09.787", "references": [{"source": "psirt@honeywell.com", "tags": ["Permissions Required"], "url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004"}, {"source": "psirt@honeywell.com", "tags": ["Permissions Required"], "url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A"}, {"source": "psirt@honeywell.com", "tags": ["Not Applicable", "Product"], "url": "https://www.honeywell.com/us/en/product-security"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable", "Product"], "url": "https://www.honeywell.com/us/en/product-security"}], "sourceIdentifier": "psirt@honeywell.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-552"}], "source": "psirt@honeywell.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-552"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}