CVE-2019-9505 PrinterLogic Print Management Software does not sanitize special characters

2019-05-0814:48:20

CWE-159

certcc

www.cve.org

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges.

CNA Affected

[
  {
    "product": "Management Software",
    "vendor": "PrinterLogic",
    "versions": [
      {
        "lessThanOrEqual": "8.3.1.96",
        "status": "affected",
        "version": "8.3.1.96",
        "versionType": "custom"
      }
    ]
  }
]