CVE-2023-3710

Printer web page invalid command execution

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).

Affected

Honeywell · PM23/43 · PC23/43, PD43 · PM42 · PX4ie/6ie · PX45/65 · PD45, PX240

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 HONEYWELL

9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

EPSS

49.04% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical

Published

2023-09-12

Updated

2025-09-12

Proof-of-concept exploits (1)

• Michael-Meade/snackhack22★ · 2026-04-09

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3710.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51885

Exploit collections (1)

• CVE-2023-3710.yamlzan8in/afrog

Security advisories

• https://www.honeywell.com/us/en/product-security

References

• CVE Record
• NVD entry

Related

• CVE-2015-6522
• CVE-2018-11709