PT-2019-9416 · Printeron · Printeron Central Print Services

Publicado 2019-07-29 · Atualizado 2019-08-05 · CVE-2018-17211

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PrinterOn Central Print Services (CPS) versions 4.1.4 and earlier

Description An issue allows an unauthenticated attacker to view details about the printers associated with CPS via a crafted HTTP GET request.

Recommendations For PrinterOn Central Print Services (CPS) versions 4.1.4 and earlier, consider restricting access to the HTTP GET request endpoint to prevent unauthorized viewing of printer details until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-17211

Produtos afetados

Printeron Central Print Services

Referências · 4

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17211-Unauthenticated_Information_Disclosure-PrinterOn · Exploit
• https://t.me/cibsecurity/5784 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-17211 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17211 · Aviso do Fabricante