Lucene search
HistoryNov 20, 2014 - 1:55 p.m.
CVE-2014-9003
lantronix
xprintserver
csrf
vulnerability
remote
authentication
administrator
configuration
modification
hijacking
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.4%
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action.
Affected configurations
Node
lantronixxprintserverMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| lantronix:xprintserver | lantronix xprintserver | eq | - |
Related
cvelist
cvelist
CVE-2014-9003
2014-11-20 11:00:00
nvd
nvd
CVE-2014-9003
2014-11-20 13:55:13
prion
prion
Cross site request forgery (csrf)
2014-11-20 13:55:00
cert
cert
Lantronix xPrintServer contains multiple vulnerabilities
2016-05-13 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.4%
Related for CVE-2014-9003