PT-2019-10967 · Printerlogic · Printerlogic Print Management

Published 2019-05-08 · Updated 2019-05-10 · CVE-2018-5409

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96

Description: The issue allows an attacker to execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit, due to insufficient verification of the origin and integrity of updated code.

Recommendations: For versions up to and including 18.3.1.96, update to a version that properly verifies the origin and integrity of updated code to prevent malicious code execution.

Fix

Origin Validation Error

Weakness Enumeration

CWE-494

CWE-346

Related Identifiers

CVE-2018-5409

Affected Products

Printerlogic Print Management

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-5409 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5409 · Vendor Advisory
• https://kb.cert.org/vuls/id/169249 · Note
• http://securityfocus.com/bid/108285 · Note