CVE-2019-14307

CVE-2019-14307 affects Ricoh SP C250DN/C252DN and SP C250SF/SP C252SF printers. Multiple buffer overflows occur while parsing HTTP parameter settings for SNMP, allowing a remote attacker to cause denial of service or execute code via crafted requests to the web server. Affected firmware versions ...

CVE-2019-14308

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is...

PT-2019-16272

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description The issue is related to improper input validation in the ippSetValueTag function of ipp.c, which can lead to a possible out of bounds read. This could result in local information disclosure from the...

PT-2019-20302

Уязвимость менеджера печати fly-admin-printer рабочей среды FLY операционной системы Astra Linux связана с ошибкой обработки пустых заданий, а также ошибкой переименовывания принтера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность...

NewStart CGSL MAIN 4.05 : samba Vulnerability (NS-SA-2019-0134)

The remote NewStart CGSL host, running version MAIN 4.05, has samba packages installed that are affected by a vulnerability: - A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash...

NewStart CGSL MAIN 4.05 : samba4 Vulnerability (NS-SA-2019-0128)

The remote NewStart CGSL host, running version MAIN 4.05, has samba4 packages installed that are affected by a vulnerability: - A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash...

DEF CON 2019: 35 Bugs in Office Printers Offer Hackers an Open Door

LAS VEGAS — At least 35 significant vulnerabilities in six commonly used enterprise printers have been uncovered, manufactured by HP, Ricoh, Xerox, Lexmark, Kyocera and Brother. The bugs will be presented by NCC Group at a DEF CON session entitled “Why You Should Fear Your Mundane Office Equipmen...

HP Deskjet Printer Falsification Malfunction

The vulnerability of HP Deskjet printer’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to cause service failures or configuration violations of the device remotely...

Printer Web Page Data Compromise

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

CVE-2018-17211: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. An unauthenticated attacker can view details about the printers associated with CPS via a crafted HTTP GET request...

Exploit for CVE-2019-14339

CVE-2019-14339 Content Provider URI Injection on Canon PRINT...

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series Buffer Overflow Vulnerability

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A buffer overflow vulnerability exists in the HP Color LaserJet Pro M280-M281 Multifunction Printer series prior to version 20190419 a...

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series cross-site scripting vulnerability (CNVD-2019-23309)

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A cross-site scripting vulnerability exists in the wireless configuration page in the HP Color LaserJet Pro M280-M281 Multifunction...

CVE-2014-9699

The CVE-2014-9699 entry concerns MakerBot Replicator 5G printers running Apache HTTP Server with directory indexing enabled. The underlying issue is directory listing exposure, which allows unauthenticated access to Apache logs, system logs, and design files via the HTTP server. The connected doc...

Not to ignore the printer vulnerability research-exploit warning-the black bar safety net

0×01 Preface After a recent period of time of the test, found within the enterprise network printer there are a variety of vulnerabilities, but also often been ignored, hence this article's research. When a printer connected to the network, you can conduct a port scan, read and write to upload a...

CVE-2019-5016

An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...

CVE-2019-5017

An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated, remote attacker can craft and send a...

CVE-2019-5016

An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...

Memory corruption

An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...

CVE-2019-5017

CVE-2019-5017 concerns KCodes NetUSB.ko in NETGEAR Nighthawk/other routers. The TALOS advisories confirm an unauthenticated remote kernel information-disclosure vulnerability in NetUSB.ko that can return multiple addresses, including a base address for NetUSB.ko (e.g., 0xBF111000) via crafted pac...