CVE-2023-37231

Loftware Spectrum is affected by a hard-coded password vulnerability in versions prior to 4.6 HF14. This issue enables unauthorized access due to credential hard-coding in HF14, with a CVSS v3.1 base score of 9.8 (CRITICAL). Impact includes confidentiality, integrity, and availability compromise....

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability previously existed in Loftware Spectrum version 4.6, which stemmed from the use of hard-coded passwords in HF14...

PT-2024-12595 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF13 Description: The issue is related to the deserialization of untrusted data. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

CVE-2023-37230

Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...

CVE-2023-37226

Loftware Spectrum pre-4.6 HF14 contains a Missing Authentication for a Critical Function vulnerability (CVE-2023-37226). Affected software: Loftware Spectrum prior to 4.6 HF14. Root cause: missing authentication for a critical function, enabling unauthorized access as indicated by CVSS 3.1 base m...

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37234

Loftware Spectrum versions through 4.6 contain a security vulnerability due to an unprotected JMX Registry. Affected component: Loftware Spectrum (through 4.6). Reported impact includes exposure risks consistent with unprotected JMX access. The issue stems from the JMX Registry exposure; no explo...

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37229

CVE-2023-37229 concerns Loftware Spectrum and is described as a server-side request forgery (SSRF) vulnerability present in versions prior to 5.1. The Red Hat, NVD, CVE listings all reiterate that Loftware Spectrum before 5.1 is affected by SSRF. The PT-Security entry confirms the issue is SSRF a...

CVE-2023-37232

Loftware Spectrum (v4.6 and earlier) exposes sensitive information from logs to unauthorized actors. Documents consistently describe the issue as a disclosure of logs, impacting confidentiality (CVSSv3.1: HIGH, 7.5). The exact root cause, affected components, and remediation steps are not detaile...

PT-2024-12597 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 5.1 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No information is...

PT-2024-12594 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to Missing Authentication for a Critical Function. There is no information provided about the estimated number of potentially affected devices worldwide or...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF14 missing authentication for critical functions...

CVE-2023-37230

Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...

CVE-2023-37231

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password...

CVE-2023-37233

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...

CVE-2023-37232

Loftware Spectrum through 4.6 exposes Sensitive Information Logs to an Unauthorized Actor...

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 5.1 that stems from the inclusion of a server-side request forgery...