Detections
Analytics
Honeywell PM43 Industrial Printers Improper Input Validation (CVE-2023-3710)
critical Tenable OT Security Plugin ID 504854
Synopsis
The remote OT asset is affected by a vulnerability.Description
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection. This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 (e.g. P10.19.050006).Solution
Refer to the vendor advisory.See Also
https://nvd.nist.gov/vuln/detail/CVE-2023-3710
http://www.nessus.org/u?78fcebd7
Plugin Details
Severity: Critical
ID: 504854
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 12/16/2025
Updated: 12/19/2025
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/o:honeywell:pm43_firmware
Required KB Items: Tenable.ot/Honeywell
Vulnerability Publication Date: 12/9/2023
Reference Information
CVE: CVE-2023-3710