CVE-2014-9002

CVE-2014-9002 (Lantronix xPrintServer) : The device does not properly restrict access to the ips/ path, enabling an unauthenticated user to execute arbitrary commands via the c parameter in an rpc action (command injection). CERT/Intel sources indicate the issue’s fix was addressed by Lantronix i...

CVE-2014-9003

Lantronix xPrintServer is affected by CSRF (CVE-2014-9003). A remote attacker can hijack an administrator’s session to modify configuration via the rpc action using the c parameter. This is described in multiple sources (NVD/CERT references) and is listed as addressed by firmware version 3.3.0. I...