CVE-2024-6620 Cross-site scripting in PC42t, PC42tp, and PC42d (Common Firmware)
Attackers can inject malicious scripts into Honeywell PC42 printers, potentially stealing sessions or disclosing information, requiring a firmware update.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-6620?
CVE-2024-6620 is a low-severity cross-site scripting vulnerability in Honeywell PC42t, PC42tp, and PC42d (Common Firmware), published on 29 Jul 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398.
Which versions are affected by CVE-2024-6620?
How do I fix CVE-2024-6620?
No fix has been published for CVE-2024-6620 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2024-6620 being exploited?
There is no known exploitation of CVE-2024-6620 in the wild and no public exploit code.
Sources
Also known as GHSA-2rmc-r8fj-3p89.