CVE-2024-6620

LOW
3.5
CVSS Score
Published: July 29, 2024 at 08:14 PM UTC
Updated: June 17, 2026 at 08:18 AM UTC
3 products affected across 1 vendorPC42tPC42tpPC42d

Using PC42t, PC42tp, and PC42d (Common Firmware) by Honeywell?

Get instant alerts when new vulnerabilities affect PC42t, PC42tp, and PC42d (Common Firmware) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
LOW3.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

T10.19.020016 ≤ v < T10.20.060398T10.19.020016
Affected range stops below T10.20.060398, so it looks safe — our inference, not a vendor statement
T10.19.020016 ≤ v < T10.20.060398T10.19.020016
Affected range stops below T10.20.060398, so it looks safe — our inference, not a vendor statement
T10.19.020016 ≤ v < T10.20.060398T10.19.020016
Affected range stops below T10.20.060398, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

3.5LOWHoneywell
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-79CWE-602

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card