CVE-2024-6620

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398.

Score

CVSS 3.1 3.5 Low

Status

Deferred - psirt@honeywell.com

Published

2024-07-29

Last modified

2024-08-01

Weaknesses

CWE-602, CWE-79

Affected products

• And Pc42d Common Firmware (Honeywell)
• Pc42t (Honeywell)
• Pc42tp (Honeywell)

References

• https://sps.honeywell.com/us/en/support/productivity/cyber-security-notifications