Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF14 missing authentication for critical functions...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 5.1 that stems from the inclusion of a server-side request forgery...

PT-2024-12599 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to a hard-coded password in Loftware Spectrum. This could potentially allow unauthorized access. Recommendations: For versions prior to 4.6 HF14, update to version...

PT-2024-12595 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF13 Description: The issue is related to the deserialization of untrusted data. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2024-12602 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions through 4.6 Description: The issue concerns an unprotected JMX Registry in Loftware Spectrum. Recommendations: For versions through 4.6, consider restricting access to the JMX Registry as a temporary mitigation...

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37232

Loftware Spectrum (v4.6 and earlier) exposes sensitive information from logs to unauthorized actors. Documents consistently describe the issue as a disclosure of logs, impacting confidentiality (CVSSv3.1: HIGH, 7.5). The exact root cause, affected components, and remediation steps are not detaile...

Loftware Spectrum security vulnerabilities

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF13 deserialization of untrusted data...

CVE-2023-37229: Server-Side Request Forgery (SSRF)

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37230

The enterprise label printing solution Loftware Spectrum is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 5.1 . The flaw exists within the testDeviceConnection function. This vulnerability allows an attacker to potentially trigger requests from the server to internal or ex...

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF...

PT-2024-12597 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 5.1 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No information is...

CVE-2023-37229

Loftware Spectrum, an enterprise label printing solution, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 5.1 . This vulnerability allows an attacker to trick the server into making requests to internal or external resources. To remediate this issue, users are recommended...