CVE-2024-6620

Low

Description

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398.

SeverityLow

CVSS3.5

Exploit probability—

ProductPC42t, PC42tp, and PC42d (Common Firmware)

PublishedJul 29, 2024

First seenJul 29, 2024

Weakness typeCWE-602CWE-602 CWE-79Cross-site scripting (XSS)

How to fix

Update

Honeywell PC42t, PC42tp, and PC42d (Common Firmware)T10.20.060398 or later

Vendor advisories

sps.honeywell.com/us/en/support/productivity/cyber-security-notifications

Affected products

Product	Affected versions	Fixed in
Honeywell PC42t, PC42tp, and PC42d (Common Firmware)	T10.19.020016 ≤ v < T10.20.060398	T10.20.060398

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.