RSS   Podatności dla 'Xprintserver'   RSS

2014-11-20
 
CVE-2014-9003

 
 
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action.

 
 
CVE-2014-9002

 
 
Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action.

 

 >>> Vendor: Lantronix 6 Produkty
Securelinx
Scs3200
Mss485-t
Xprintserver
Xprintserver firmware
Mss firmware

Copyright 2024, cxsecurity.com

 

Back to Top