Vulnerability Description
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Printerlogic | Print Management | <= 18.3.1.96 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/108285
- https://kb.cert.org/vuls/id/169249/Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/108285
- https://kb.cert.org/vuls/id/169249/Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2018-5408?
CVE-2018-5408 is a vulnerability with a CVSS score of 7.4 (HIGH). The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificat...
How severe is CVE-2018-5408?
CVE-2018-5408 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-5408?
Check the references section above for vendor advisories and patch information. Affected products include: Printerlogic Print Management.