CVE-2017-5671 – Intermec PM43 Industrial Printer - Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2017-5671

28 Mar 2017 — Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file. Impresoras industriales Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43 y PC42 en versiones anteriores a 10.11.013310 y 10.12.x en versiones anteriores a 10.12.013309 tienen /usr/bin/l... • https://packetstorm.news/files/id/141915 • CWE-269: Improper Privilege Management •