PT-2019-10967 · Printerlogic · Printerlogic Print Management

Publicado 2019-05-08 · Atualizado 2019-05-10 · CVE-2018-5409

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96

Description: The issue allows an attacker to execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit, due to insufficient verification of the origin and integrity of updated code.

Recommendations: For versions up to and including 18.3.1.96, update to a version that properly verifies the origin and integrity of updated code to prevent malicious code execution.

Correção

Origin Validation Error

Enumeração de Fraquezas

CWE-494

CWE-346

Identificadores relacionados

CVE-2018-5409

Produtos afetados

Printerlogic Print Management

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-5409 · Nota de Segurança
• https://kb.cert.org/vuls/id/169249 · Nota
• https://osv.dev/vulnerability/CVE-2018-5409 · Aviso do Fabricante
• http://securityfocus.com/bid/108285 · Nota