PrinterLogic Print Management Software updates and executes the code without origin and code verification

Published 7 y ago 2019-05-08 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.8

v3.0 · NVD

CISA KEV

not known exploited

EPSS

1.1%

percentile 65%

Public exploits

none known

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.

Exploit prediction (EPSS)

1.08% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	9.8	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	10.0	`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Affected products

PrinterLogic Management Software

Classification

Weakness

CWE-494 Download of Code Without Integrity Check
CWE-346 Origin Validation Error

References

kb.cert.org /vuls/id/169249/ · third-party-advisory, x_refsource_CERT-VN, x_transferred
securityfocus.com /bid/108285 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2018-5409
NVD: CVE-2018-5409

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.