CVE-2017-5671

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.

• CWE-269

• http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdfRelease Notes
• http://www.securityfocus.com/bid/97236Third Party Advisory, VDB Entry
• https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/Exploit, Patch, Third Party Advisory
• https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdfVendor Advisory
• https://www.exploit-db.com/exploits/41754/
• http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdfRelease Notes
• http://www.securityfocus.com/bid/97236Third Party Advisory, VDB Entry
• https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/Exploit, Patch, Third Party Advisory
• https://github.com/kmkz/exploit/blob/master/CVE-2017-5671-Credits.pdfVendor Advisory
• https://www.exploit-db.com/exploits/41754/

Published

Mar 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5665The splt_cue_export_to_file function in cue.c in libmp3splt …
• CVE-2017-5666The free_options function in options_manager.c in mp3splt 2.…
• CVE-2017-5667The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci…6.5
• CVE-2017-5668bitlbee-libpurple before 3.5.1 allows remote attackers to ca…
• CVE-2017-5669The do_shmat function in ipc/shm.c in the Linux kernel throu…7.8
• CVE-2017-5670Riverbed RiOS through 9.6.0 deletes the secure vault with th…
• CVE-2017-5672Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has t…
• CVE-2017-5673In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the…
• CVE-2017-5674A vulnerability in a custom-built GoAhead web server used on…
• CVE-2017-5675A command-injection vulnerability exists in a web applicatio…
• CVE-2017-5677PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injectio…
• CVE-2017-5678Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…