CVE-2023-37232

Loftware Spectrum through 4.6 exposes Sensitive Information Logs to an Unauthorized Actor...

CVE-2023-37233

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...

CVE-2023-37231

The Loftware Spectrum enterprise label printing solution, specifically versions prior to 4.6 HF14 , contains a hard-coded password . This vulnerability could potentially allow unauthorized access to the system. To remediate this issue, users should update to version 4.6 HF14 or later . As a tempo...

CVE-2023-37231: Use of Hard-coded Password

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password...

CVE-2023-37227: Deserialization of Untrusted Data

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37234: Improper Access Control

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37232: Exposure of Sensitive Information to an Unauthorized Actor

Loftware Spectrum through 4.6 exposes Sensitive Information Logs to an Unauthorized Actor...

CVE-2023-37233: Improper Restriction of XML External Entity Reference

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...

CVE-2023-37230: Server-Side Request Forgery (SSRF)

Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...

CVE-2023-37226: Improper Authentication

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

PT-2024-12600

Name of the Vulnerable Software and Affected Versions Loftware Spectrum versions through 4.6 Description The issue exposes sensitive information, specifically logs, to unauthorized actors. This allows unauthorized access to potentially sensitive data. Recommendations For Loftware Spectrum version...

PT-2024-12601

Name of the Vulnerable Software and Affected Versions Loftware Spectrum versions prior to 4.6 HF14 Description The issue allows authenticated XXE attacks. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

PT-2024-12598

Name of the Vulnerable Software and Affected Versions Loftware Spectrum versions prior to 5.1 Description The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. This can potentially...

CVE-2023-37227

Loftware Spectrum versions prior to 4.6 HF13 are vulnerable to a security flaw caused by the deserialization of untrusted data . This vulnerability allows for potential exploitation of the cloud-based label printing platform. To remediate this issue, users are recommended to update to version 4.6...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 5.1 that stems from the inclusion of a server-side request forgery...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability previously existed in Loftware Spectrum version 4.6, which stemmed from the use of hard-coded passwords in HF14...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum version 4.6 and prior versions that stems from having an unprotected JMX registry...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6, which stems from HF14 that allows authenticated XML external entity...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum version 4.6 and prior versions that stems from the disclosure of sensitive information lo...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF14 missing authentication for critical functions...