Description (CNA)
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Honeywell / PM23/43 | affected 0 before P10.19.050004 |
| Honeywell / PC23/43, PD43 | affected 0 before K10.19.050004 |
| Honeywell / PM42 | affected 0 before T10.19.050004 |
| Honeywell / PM42 | affected 0 before L10.19.050004 |
| Honeywell / PX4ie/6ie | affected 0 before A10.19.050004 |
| Honeywell / PX45/65 | affected 0 before B10.19.050004 |
| Honeywell / PD45, PX240 | affected 0 before F10.19.050004 |
| Honeywell / PX940 | affected 0 before H10.19.050004 |
| Honeywell / PM45 | affected 0 before J10.19.050004 |
| Honeywell / RP2f/RP4f | affected 0 before M10.19.050006 |
CWE
CWE-384
References
- https://www.honeywell.com/us/en/product-security
- https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004
- https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A
ADP enrichment
No English description supplied.
- https://www.honeywell.com/us/en/product-security
- https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004
- https://hsmftp.honeywell.com:443/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004A
No English description supplied.
No references supplied.