PT-2022-17070 · Printix · Printix Secure Cloud Print Management

Logan Latvala · Published 2022-03-02 · Updated 2022-09-03 · CVE-2022-25089

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Printix Secure Cloud Print Management versions 1.3.1106.0 and earlier

Description The issue concerns the incorrect use of Privileged APIs to modify values in HKEY LOCAL MACHINE via UITasks.PersistentRegistryData. This could potentially lead to unauthorized changes in the system registry.

Recommendations For Printix Secure Cloud Print Management versions 1.3.1106.0 and earlier, consider restricting access to the UITasks.PersistentRegistryData until a proper fix is applied to prevent unauthorized modifications to the system registry. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-25089

Affected Products

Printix Secure Cloud Print Management

References · 9

• 🔥 https://github.com/ComparedArray/printix-CVE-2022-25089 · Exploit
• 🔥 https://exploit-db.com/exploits/50798 · Exploit
• https://osv.dev/vulnerability/CVE-2022-25089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25089 · Security Note
• http://packetstormsecurity.com/files/167013/Printix-1.3.1106.0-Privileged-API-Abuse.html · Note
• http://printix.com · Note
• https://t.me/cvenotify/35684 · Telegram Post
• https://t.me/cvenotify/27795 · Telegram Post
• https://t.me/cvenotify/29955 · Telegram Post