{"id":"CVE-2023-3710","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-3710","generatedAt":"2026-11-04T23:01:28.112Z","title":"Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004.","description":"Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).","published":"2023-09-12T20:15:09.000Z","lastModified":"2026-06-17T06:14:41.000Z","status":"Modified","sourceIdentifier":"psirt@honeywell.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-20","CWE-77"],"affected":["honeywell/pm43 firmware"],"epss":{"score":0.4904,"percentile":0.98884,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2024-03-14","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":51885,"kind":"exploit","title":"Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)","url":"https://www.exploit-db.com/exploits/51885","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/51885.py","file":"exploits/hardware/remote/51885.py","published":"2024-03-14","added":"2024-03-14","updated":"2024-03-14","author":"ByteHunter","type":"remote","platform":"hardware","port":null,"verified":false,"codes":["CVE-2023-3710"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 49.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004","tags":["Permissions Required"],"source":"psirt@honeywell.com"},{"url":"https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A","tags":["Permissions Required"],"source":"psirt@honeywell.com"},{"url":"https://www.honeywell.com/us/en/product-security","tags":["Product"],"source":"psirt@honeywell.com"},{"url":"https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004","tags":["Permissions Required"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A","tags":["Permissions Required"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.honeywell.com/us/en/product-security","tags":["Product"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-3710","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}