Lucene search
HistoryNov 20, 2014 - 1:55 p.m.
CVE-2014-9003
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.006
Percentile
78.4%
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action.
Affected configurations
Node
lantronixxprintserverMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lantronix | xprintserver | - | cpe:2.3:h:lantronix:xprintserver:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2014-9003
2014-11-20 13:55:13
cvelist
cvelist
CVE-2014-9003
2014-11-20 11:00:00
prion
prion
Cross site request forgery (csrf)
2014-11-20 13:55:00
cert
cert
Lantronix xPrintServer contains multiple vulnerabilities
2016-05-13 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.006
Percentile
78.4%
Related for NVD:CVE-2014-9003