Vulnerability in Printerlogic Management Software
CVE-2018-5409
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (63.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 63.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Printerlogic Management Software — versions 8.3.1.96
- Printerlogic Print Management
Weakness classification (CWE)
References
- kb.cert.org/vuls/id/169249/ (US Government Resource, Third Party Advisory, third-party-advisory)
- www.securityfocus.com/bid/108285 (vdb-entry)
Frequently asked questions
- What is CVE-2018-5409?
- CVE-2018-5409 is a critical-severity vulnerability in Printerlogic Management Software, classified under Download of Code Without Integrity Check. CVSS score: 9.8/10. Published 2019-05-08.
- How severe is CVE-2018-5409?
- Critical severity. CVSS v3 base score is 9.8 out of 10.