TROYANOSYVIRUS
Retour aux CVEs

CVE-2019-10960

HIGH
7.5

Description

Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.

Details CVE

Score CVSS v3.17.5
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie8/20/2019
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0

Produits affectes

zebra:220xi4zebra:220xi4_firmwarezebra:zt220zebra:zt220_firmwarezebra:zt230zebra:zt230_firmwarezebra:zt410zebra:zt410_firmwarezebra:zt420zebra:zt420_firmwarezebra:zt510zebra:zt510_firmwarezebra:zt610zebra:zt610_firmwarezebra:zt620zebra:zt620_firmware

Faiblesses (CWE)

CWE-522CWE-522

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.