CVE-2019-9505 Vulnerability Details

  /     /     /  

CVE-2019-9505 Metadata Quick Info

CVE Published: 08/05/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: certcc | Vendor: PrinterLogic | Product: Management Software
Status : PUBLISHED

CVE-2019-9505 Description

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-159
CWE Name: CWE-159 Failure to Sanitize Special Element
Source: PrinterLogic

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).