« Volver al listado

CVE-2017-5671

Estado: ModificadaAlta (8.8)—

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Honeywell — Intermec Pc23 FirmwareHoneywell — Intermec Pc42 FirmwareHoneywell — Intermec Pc43 FirmwareHoneywell — Intermec Pd43 FirmwareHoneywell — Intermec Pm23 FirmwareHoneywell — Intermec Pm42 FirmwareHoneywell — Intermec Pm43 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-5671",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-03-29T14:59:00.377",
  "references": [
    {
      "url": "http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf",
      "tags": [
        "Release Notes"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/97236",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/",
      "tags": [
        "Exploit",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/41754/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf",
      "tags": [
        "Release Notes"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/97236",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/",
      "tags": [
        "Exploit",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/41754/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file."
    },
    {
      "lang": "es",
      "value": "Impresoras industriales Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43 y PC42 en versiones anteriores a 10.11.013310 y 10.12.x en versiones anteriores a 10.12.013309 tienen /usr/bin/lua setuid instalado en la cuenta itadmin, lo que permite a usuarios locales conducir un ataque BusyBox jailbreak y obtener privilegios de root sobrescribiendo el archivo /etc/shadow."
    }
  ],
  "lastModified": "2026-06-17T01:21:00.837",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pc23_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "122F856E-E8E7-4BFB-AA97-E3C50D811E12",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pc42_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A2FDF1F-B7BF-492D-8FFB-8D40B805DC17",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pc43_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60E5DE7C-9B42-4125-A019-02B3B5499DFD",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pd43_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5018410C-9B51-460B-B237-761C4549E314",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pm23_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16D913D8-C155-4F08-B341-72A986D7D29D",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pm42_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF398612-ACC6-4D8E-8DE0-1354FF98F68F",
              "versionEndIncluding": "10.10.011406"
            },
            {
              "criteria": "cpe:2.3:o:honeywell:intermec_pm43_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "278B804E-9E20-40D3-BF11-80FB2CB7DE35",
              "versionEndIncluding": "10.10.011406"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pc23:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A76805C2-7081-40D3-8400-CF71AD00F897"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pc42:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "65750656-5AF7-4E3B-A0CE-EC1B1C784A4E"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pc43:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "77BAFBC9-F93C-40FE-94EB-563B75C96942"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pd43:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "691EEB28-DA89-4CE8-AB35-50AA05662230"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pm23:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "34989BBF-1E3C-4636-90A0-C603DAEE8DE4"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pm42:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C0A4C6C-4858-4856-9599-8A7F980C6E1E"
            },
            {
              "criteria": "cpe:2.3:h:honeywell:intermec_pm43:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AD95F008-3D2C-4E2C-978A-C101441CBE91"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}