PT-2023-19066 · Cl4Nx · Cl4Nx

CVE-2023-23594 · Publicado 2023-03-31 · Atualizado 2025-02-18

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CL4NX printer versions prior to 1.13.3-u724 r2

Description An authentication bypass issue in the web client interface of the CL4NX printer allows remote unauthenticated attackers to execute commands intended for valid and authenticated users. This includes actions such as file uploads and configuration changes.

Recommendations For versions prior to 1.13.3-u724 r2, update the firmware to version 1.13.3-u724 r2 or later to resolve the issue. As a temporary workaround, consider restricting access to the web client interface until the update can be applied.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2023-23594

Produtos afetados

Cl4Nx

Referências · 9

• https://osv.dev/vulnerability/CVE-2023-23594 · Aviso do Fabricante
• https://hackandpwn.com/disclosures/CVE-2023-23594.pdf · Nota
• https://t.me/cvenotify/111641 · Publicação no Telegram
• https://satoamerica.com/products/printers/industrial-thermal-printers/cl4nx-plus · Nota
• https://t.me/cvenotify/47948 · Publicação no Telegram
• https://t.me/cibsecurity/61278 · Publicação no Telegram
• https://t.me/cvenotify/47277 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-23594 · Nota de Segurança
• https://d2n1rly8br52rx.cloudfront.net/content-blocks/files/pages/Vulnerability-Disclosure.pdf · Aviso do Fabricante