ASUSTOR Data Master 命令注入漏洞

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. ASUSTOR Data Master suffers from a command injection vulnerability that stems from the Printer service feature failing to properly filter constructed command special characters, commands, etc. The vulnerability...

PT-2023-25758

Name of the Vulnerable Software and Affected Versions ADM versions 4.0.6.RIS1, 4.1.0 and below ADM versions 4.2.2.RI61 and below Description The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and create...

PT-2023-7627 · Asustor · Asustor Data Master

Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 4.0.6.RIS1 through 4.1.0 ASUSTOR Data Master ADM versions 4.2.2.RI61 and below Description: The issue is related to improper neutralization of special elements used in a command, allowing remote unauthorized...

CVE-2023-2910: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in Printer service functionality in ASUSTOR Data Master ADM allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions include: ADM 4.0.6.RIS...

CVE-2023-3698: Improper Limitation of a Pathname to a Restricted Directory

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

Privilege escalation

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

CVE-2022-4894

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

CVE-2022-4894

CVE-2022-4894 affects certain HP and Samsung Printer software packages, enabling elevation of privilege via Uncontrolled Search Path Element. The root cause is improper handling of search paths in printer software, allowing a local attacker with low privileges and user interaction to escalate rig...

PT-2023-15905 · Hewlett Packard +1 · Hp Sprinter +1

Name of the Vulnerable Software and Affected Versions: HP Printer software affected versions not specified Samsung Printer software affected versions not specified Description: The issue is related to an elevation of privilege due to an Uncontrolled Search Path Element in certain HP and Samsung...

CVE-2022-4894: Uncontrolled Search Path Element

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

HP Printer Software Elevation of Privilege (HPSBPI03857)

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

CVE-2023-38556

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

Input validation

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

CVE-2023-38556

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

CVE-2023-38556

CVE-2023-38556 affects SEIKO EPSON printer Web Config, which has an improper input validation flaw (CWE-20). This allows a remote attacker to turn off the printer via network access without user interaction. The vulnerability impacts SEIKO EPSON Web Config pre-installed on affected printers and r...

CVE-2023-38556

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)

Overview SEIKO EPSON printer Web Config contains a denial-of-service DoS vulnerability due to improper input validation CWE-20. SEIKO EPSON CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and SEIKO EPSON CORPORATION coordinated under the...

PT-2023-26510 · Seiko Epson · Seiko Epson Printer Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printer Web Config affected versions not specified Description: The issue is related to an improper input validation vulnerability in the Web Config software of SEIKO EPSON printers. This vulnerability allows a remote attacker to...

CVE-2023-38556: Undefined Security Weakness

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

JVN#61337171: SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)

SEIKO EPSON printer Web Config contains a denial-of-service DoS vulnerability due to improper input validation CWE-20. Impact The printer may be turned off by a remote attacker. Solution Apply workarounds The developer strongly recommends users to apply workarounds, as the update firmware for the...