NVD

Id
84050  
Name
CVE-2017-5671  
Description
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-03-29  
Modified Date
2017-04-10  
Seq
2017-5671  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412326 84050 CVE-2017-6414 [oss-security] 20170301 CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU  View
412327 84050 CVE-2017-6414 96541  View
412328 84050 CVE-2017-6414 https://bugzilla.redhat.com/show_bug.cgi?id=1427833  View
412329 84050 CVE-2017-6414 https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c  View
412330 84050 CVE-2017-6414 https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53  View
412331 84050 CVE-2017-6414 [oss-security] 20170301 CVE-2017-6414 Qemu: libcacard: host memory leakage while creating new APDU  View
412332 84050 CVE-2017-6414 96541  View
412333 84050 CVE-2017-6414 https://bugzilla.redhat.com/show_bug.cgi?id=1427833  View
412334 84050 CVE-2017-6414 https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c  View
412335 84050 CVE-2017-6414 https://cgit.freedesktop.org/spice/libcacard/tree/NEWS?id=aaa5251791bf0b1640afcba77a7d79ea23c42d53  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66580 JVNDB-2017-002905 複数の Honeywell Intermec 工業用プリンタにおける BusyBox を脱獄される脆弱性 複数の Honeywell Intermec 工業用プリンタは、itadmin アカウントへの setuid が /usr/bin/lua によりインストールされるため、BusyBox を脱獄され、root 権限を取得される脆弱性が存在します。 CVE-2017-5671 0 CVE-2017-5671 84050 7.2 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002905.html 2017-03-14 2017-05-08 View