Honeywell PD45 EUVD-2026-86385

Requires an authenticated session on the Honeywell PD45 Industrial Printer web management interface using the admin or itadmin account, with the Intermec Fingerprint Command Interface reachable to submit programming-language commands to the internal interpreter. Affected firmware is F10.19.010040. Limiting factors: valid administrative (admin/itadmin) credentials are mandatory, so this is not exploitable pre-authentication; the printer's management interface must be network-reachable to the attacker; and devices updated to firmware F10.22.030745 are patched.

The vendor CVSS of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a genuine full-compromise RCE, but the network vector and 'Low' privilege rating overstate real-world exposure. Exploitation is gated behind valid administrative credentials - the description explicitly requires 'access to the admin or itadmin account' - which are administrative rather than low-privilege accounts, so PR:L is arguably generous and PR:H is more defensible. There is no EPSS score, no CISA KEV listing, and no known public exploit code, so this is not confirmed actively exploited; it represents an authenticated-admin escape from the application layer to OS command/file execution on the printer. No SSVC decision data was provided. The primary limiting factor is that an attacker must already hold admin/itadmin credentials on the printer's web management interface, making this most relevant as a post-authentication privilege-boundary crossing (app-admin to device OS) or an insider/credential-theft scenario rather than a mass-exploitable pre-auth flaw. Net: a real fix-worthy issue on affected devices, but the low deployment footprint of industrial printers and the admin-credential prerequisite temper the practical priority relative to the raw 8.8 score.

An attacker who has obtained or guessed the printer's admin or itadmin web-management credentials logs into the interface and submits crafted Intermec Fingerprint programming-language commands to the internal command interpreter. Those commands write arbitrary files and execute malicious commands on the printer, yielding full device control. No public exploit code has been identified at time of analysis.