Honeywell PM43 Firmware vulnerabilities

3 CVEs affecting Honeywell PM43 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-3712, published 2023-09-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-3710, published 2023-09-12. Critical severity, CVSS 9.8. EPSS: 49% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the…
CVE-2023-3711, published 2023-09-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to…
CVE-2023-3712, published 2023-09-12. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to…