VDB
CVE-2018-5408
CVE-2018-5408
PUBLISHED
CVSS 7.400000095367432 HIGH
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
EPSS 0.12% · 31.0th percentile
Risk Scores
CVSS 3.0
7.400000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.12%
31.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PrinterLogic | Management Software | 8.3.1.96 |
| printerlogic | print_management | 0 |
Timeline
- May 8, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
References
- https://kb.cert.org/vuls/id/169249 url
- http://www.securityfocus.com/bid/108285 url
- VU# third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-5408 advisory