Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-5409

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.

Published

2019-05-08T15:30:53.063

Last Modified

2024-11-21T04:08:45.933

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-494
  • Type: Primary
    CWE-346
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application printerlogic print_management ≤ 18.3.1.96 Yes
References