PT-2023-31261 · Zebra Technologies · Ztc Zt410-203Dpi Zpl Printer

David Cámara Galindo · Published 2023-10-11 · Updated 2025-08-28 · CVE-2023-4957

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zebra Technologies ZTC ZT410-203dpi ZPL printer (affected versions not specified)

Description A vulnerability has been found that allows an attacker on the same network as the printer to bypass authentication. This is achieved by sending a specially crafted POST request to the "setvarsResults.cgi" file, enabling the attacker to change the username and password for the Web Page. The printer's protected mode must be disabled for this vulnerability to be exploitable.

Recommendations For the Zebra Technologies ZTC ZT410-203dpi ZPL printer, consider enabling the protected mode to prevent exploitation until a fix is available. As a temporary workaround, restrict access to the "setvarsResults.cgi" file to minimize the risk of exploitation. Avoid using the printer on a network where the protected mode is disabled until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2023-4957

Affected Products

Ztc Zt410-203Dpi Zpl Printer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-4957 · Security Note
• https://t.me/cveNotify/133808 · Telegram Post
• https://t.me/cibsecurity/72106 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/authentication-bypass-zebra-ztc · Note