Medium severity6.4NVD Advisory· Published Sep 12, 2023· Updated Jun 17, 2026
CVE-2023-3711
CVE-2023-3711
Description
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11- Honeywell/PC23/43, PD43v5Range: 0
- Honeywell/PD45, PX240v5Range: 0
- Honeywell/PM23/43v5Range: 0
- Honeywell/PM42v5Range: 0
- Honeywell/PM45v5Range: 0
- Honeywell/PX45/65v5Range: 0
- Honeywell/PX4ie/6iev5Range: 0
- Honeywell/PX940v5Range: 0
- Honeywell/RP2f/RP4fv5Range: 0
Patches
Vulnerability mechanics
References
3- hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwaresignedP1019050004nvdPermissions Required
- hsmftp.honeywell.com/en/Software/Printers/Industrial/PM23-PM23c-PM43-PM43c/Current/Firmware/firmwarexasignedP1019050004AnvdPermissions Required
- www.honeywell.com/us/en/product-securitynvdProduct
News mentions
0No linked articles in our index yet.