PT-2019-10966 · Printerlogic · Printerlogic Print Management

Published 2019-05-08 · Updated 2019-05-10 · CVE-2018-5408

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96

Description: The issue concerns the validation of the PrinterLogic management portal's SSL certificate. When the certificate is invalid or malicious, it may allow an attacker to perform a man-in-the-middle (MITM) attack, potentially spoofing a trusted entity. This could result in the software connecting to a malicious host under the belief it is a trusted host, or accepting spoofed data that appears to come from a trusted host.

Recommendations: For versions up to and including 18.3.1.96, update to a version that correctly validates the SSL certificate to prevent potential man-in-the-middle attacks.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2018-5408

Affected Products

Printerlogic Print Management

References · 4

• https://osv.dev/vulnerability/CVE-2018-5408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5408 · Security Note
• https://kb.cert.org/vuls/id/169249 · Note
• http://securityfocus.com/bid/108285 · Note