CVE-2024-22076

2024-01-2300:00:00

mitre

www.cve.org

cve-2024-22076

print server

remote code execution

php scripts

administrative interface

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.

References

docs.myq-solution.com/en/print-server/8.2/

docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29

www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076/