Skip to content
OpenAdvisories
Critical · 9.9 Scanner template Public exploit CVE-2023-3710 EUVD-2023-44345GHSA-9mq5-f7mh-w3xc

Printer web page invalid command execution

Published Sep 12, 2023 · Updated Sep 12, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: PC23/43, PD43 Product: PD45, PX240 Product: PM23/43 Product: PM42 Product: PM45 Product: PX45/65 Product: PX4ie/6ie Product: PX940 Product: RP2f/RP4f Category: ICS / OT

Description

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Affected products

VendorProductAffectedFixed
Honeywell PM23/43 < P10.19.050004 P10.19.050004
Honeywell PC23/43, PD43 < K10.19.050004 K10.19.050004
Honeywell PM42 < T10.19.050004, < L10.19.050004 T10.19.050004
Honeywell PX4ie/6ie < A10.19.050004 A10.19.050004
Honeywell PX45/65 < B10.19.050004 B10.19.050004
Honeywell PD45, PX240 < F10.19.050004 F10.19.050004
Honeywell PX940 < H10.19.050004 H10.19.050004
Honeywell PM45 < J10.19.050004 J10.19.050004
Honeywell RP2f/RP4f < M10.19.050006 M10.19.050006

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References