PT-2026-20541 · Bematech · Bematech Mp-4200 Th

Jonatas Fil · Published 2026-02-18 · Updated 2026-02-18 · CVE-2019-25401

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bematech MP-4200 TH printer (affected versions not specified)

Description The Bematech MP-4200 TH printer has a denial of service issue in the admin configuration page. Remote attackers can send specially crafted POST requests with malformed admin and person parameters to the printer’s web service. This can cause the web service to crash, resulting in a denial of service. The affected API endpoint is the admin configuration page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2019-25401

Affected Products

Bematech Mp-4200 Th

References · 5

• 🔥 https://exploit-db.com/exploits/47648 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25401 · Security Note
• https://vulncheck.com/advisories/bematech-printer-mp-th-denial-of-service · Note
• https://web.archive.org/web/20180814065516/https://bematech.com.br · Note
• https://legacyglobal.com/products/bematech-formerly-logic-controls-mp-4200-thermal-receipt-printer/?srsltid=AfmBOor3LXakwJp10bE_8n8YIBKrFPFGFc5DKrxdMGChGQ-Y24i8MVQa · Note