CVE-2017-5671

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.40% chance of exploitation in the next 30 days, 71th percentile

Published

2017-03-29

Updated

2024-08-05

Proof-of-concept exploits (2)

• https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/
• kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41754

References

• CVE Record
• NVD entry

Related

• CVE-2018-10682
• CVE-2018-10683
• CVE-2019-14251
• CVE-2019-14252
• CVE-2019-14253
• CVE-2019-14254