CVE-2023-3711 Vulnerability Details

  /     /     /  

CVE-2023-3711 Metadata Quick Info

CVE Published: 12/09/2023 | CVE Updated: 25/09/2024 | CVE Year: 2023
Source: Honeywell | Vendor: Honeywell | Product: PM23/43
Status : PUBLISHED

---

CVE-2023-3711 Description

Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Metrics

CVSS Version: 3.1 | Base Score: 6.4 MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* HIGH
    Privileges Required (PR)* NONE
    User Interaction (UI)* REQUIRED
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* HIGH
    Integrity Impact (I)* LOW
    Availability Impact (A)* LOW

Weakness Enumeration (CWE)

CWE-ID: CWE-384
CWE Name: CWE-384 Session Fixation
Source: Honeywell

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-59
CAPEC Description: CAPEC-59 Session Credential Falsification through Prediction


Source: NVD (National Vulnerability Database).