CVE-2018-5409

PrinterLogic Print Management Software (versions up to and including 18.3.1.96) is affected by CVE-2018-5409, in which the update mechanism executes code without sufficiently verifying the origin or integrity of the code. This creates a remote code execution risk if an attacker can compromise the...

CVE-2019-9505 PrinterLogic Print Management Software does not sanitize special characters

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

CVE-2018-5408

CVE-2018-5408 affects PrinterLogic Print Management Software (up to 18.3.1.96). The issue is improper validation of the management portal’s SSL certificate, enabling potential MITM spoofing of a trusted host and data origin deception. Impacts include partial confidentiality/integrity and a networ...

CVE-2019-9505

PrinterLogic Print Management Software (up to version 18.3.1.96) is affected by CVE-2019-9505 due to inadequate sanitization of special characters, enabling remote, unauthenticated execution of arbitrary code with SYSTEM privileges and remote changes to configuration files. Root cause: input hand...

CVE-2018-5408 PrinterLogic Print Management Software fails to validate the management portal SSL certificates

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a...

CVE-2018-5409 PrinterLogic Print Management Software updates and executes the code without origin and code verification

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the...

PT-2019-10966

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96 Description: The issue concerns the validation of the PrinterLogic management portal's SSL certificate. When the certificate is invalid or malicious, it may allow a...

PT-2019-19685

Name of the Vulnerable Software and Affected Versions PrinterLogic Print Management software versions up to and including 18.3.1.96 Description The issue allows an unauthenticated attacker to remotely execute arbitrary code with SYSTEM privileges due to the software's failure to sanitize special...

PT-2019-10967

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96 Description: The issue allows an attacker to execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit, due ...

CVE-2018-5409: Download of Code Without Integrity Check

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the...

CVE-2019-9505: Improper Handling of Invalid Use of Special Elements

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges...

CVE-2018-5408: Improper Certificate Validation

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a...

High-Severity PrinterLogic Flaws Enable Remote Code Execution

A slew of high-severity flaws have been disclosed in the PrinterLogic printer management service, which could enable a remote attacker to execute code on workstations running the PrinterLogic agent. PrinterLogic’s Print Management software allows businesses to deploy and use remote printers...

PrinterLogic Print Management Software Vulnerabilities

The CERT Coordination Center CERT/CC has released information on vulnerabilities affecting PrinterLogic Print Management Software. A remote attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages user...