CVE-2017-5671
N/A
Published: March 29, 2017 at 02:00 PM UTC
Updated: June 17, 2026 at 01:21 AM UTC
14 products affected across 1 vendorIntermec PD43 FirmwareIntermec PC23 FirmwareIntermec PC43 Firmware
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
v ≤ 10.10.011406
honeywell-intermec-pc23 (same device) · honeywell-intermec-pc42 (same device) · honeywell-intermec-pc43 (same device) · honeywell-intermec-pd43 (same device) · honeywell-intermec-pm23 (same device) · honeywell-intermec-pm42 (same device) · honeywell-intermec-pm43 (same device)
Intermec Pc23· Honeywelldevice
80%All versions
Intermec Pc42· Honeywelldevice
80%All versions
Intermec Pc43· Honeywelldevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
x_refsource_CONFIRMRelease Notes
Source: [email protected]
http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdfVDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/97236x_refsource_MISCExploitPatchThird Party Advisory
Source: [email protected]
https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdfQuick Info
StatusMODIFIED
CWE
CWE-269
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card