CVE-2022-34887

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password...

Remote code execution

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow...

Design/Logic Flaw

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password...

CVE-2022-3429

Summary: CVE-2022-3429 is described as a denial-of-service in Lenovo printer firmware caused by sending illegal or malformed strings to an open port, leading to a display error and printer unavailability. Affected product/area: Lenovo printers (firmware). What is vulnerable: Input handling on an ...

CVE-2022-34887

CVE-2022-34887 affects Lenovo Printers where standard users can directly operate and set printer configuration information (e.g., IP) without authenticating the administrator password. Public records describe this as a network-accessible issue with low privileges required and no user interaction,...

CVE-2022-34887: Improper Authentication

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password...

PT-2023-13356 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo printers affected versions not specified Description: A denial-of-service issue was found in the firmware used in Lenovo printers. It occurs when users send illegal or malformed strings to an open port, triggering a denial of service...

PT-2023-13434 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo Printers affected versions not specified Description: The issue allows standard users to directly operate and set printer configuration information, such as IP, in some Lenovo Printers without having to authenticate with the...

The vulnerability of the printer web page module (ARM) of Honeywell PM43, which allows a intruder to execute arbitrary commands

The vulnerability of the printer web page module ARM of Honeywell PM43 is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

CWA Mac unable to print after macOS Sonoma upgrade: "Printer not activated. Error code -41"

Post macOS upgrade to Sonoma, Citrix Workspace App for Mac users with locally attached printers will receive an error message: "Printer not activated. Error code -41 " when attempting to print...

Authentication flaw

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

CVE-2023-4957

CVE-2023-4957 affects Zebra Technologies ZTC industrial printers (ZT410) and GK420d desktop models. A authentication-bypass flaw allows an attacker on the same network to alter web-page credentials by sending a crafted POST to setvarsResults.cgi when the printer’s protected mode is disabled. Repo...

CVE-2023-4957 Authentication Bypass on Zebra ZTC

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

CVE-2023-4957: Authentication Bypass Using an Alternate Path or Channel

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

PT-2023-31261

Name of the Vulnerable Software and Affected Versions Zebra Technologies ZTC ZT410-203dpi ZPL printer affected versions not specified Description A vulnerability has been found that allows an attacker on the same network as the printer to bypass authentication. This is achieved by sending a...

printer-ciss-cartridge.ru Cross Site Scripting vulnerability OBB-3739599

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SATO America CL4NX License Issue Vulnerability

The SATO America CL4NX is a printer from SATO America. An authorization issue vulnerability exists in SATO America CL4NX version 1.13.2-u455r2, which stems from the presence of an improper authentication vulnerability...

Fedora: Security Advisory for libppd (FEDORA-2023-52aa3d1a4f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SATO America CL4NX Path Traversal Vulnerability

The SATO America CL4NX is a printer from SATO America. A path traversal vulnerability exists in the SATO America CL4NX version 1.13.2-u455r2, which stems from the fact that the parameter full in the file /rest/dir/ causes path traversal...

[SECURITY] Fedora 39 Update: libppd-2.0~rc2-4.fc39

Libppd provides all PPD related function/API which is going to be removed from CUPS 3.X, but are still required for retro-fitting support of legacy printers. The library is meant only for retro-fitting printer applications, any new printer drivers have to be written as native printer application...