CVE-2024-6620 is a cross-site scripting (XSS) vulnerability affecting Honeywell PC42t, PC42tp, and PC42d printers running firmware versions T10.19.020016 to T10.20.060398. An attacker could inject malicious code, potentially leading to information disclosure, session theft, or client-side request forgery. The vulnerability has a CVSS score of 3.5 (LOW), indicating an attack vector requiring adjacent network access and user interaction, with a low impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Honeywell recommends updating to firmware version 20.6 T10.20.060398 to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Honeywell | PC42t, PC42tp, And PC42d (Common Firmware) | >= T10.19.020016, < T10.20.060398CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
Remediation records are not available for this CVE.