CVE-2014-9002

Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action...

CVE-2014-9003

Cross-site request forgery CSRF vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action...

PT-2014-8781

Name of the Vulnerable Software and Affected Versions Lantronix xPrintServer affected versions not specified Description The issue is related to improper access restriction to the ips/ directory, allowing remote attackers to execute arbitrary commands. This is achieved via the c parameter in an r...

CVE-2014-9003: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action...

PT-2014-8782

Name of the Vulnerable Software and Affected Versions Lantronix xPrintServer affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify configuration. This can be demonstrated ...

CVE-2014-9002: Undefined Security Weakness

Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action...