Vulnerability Description
MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Myq-Solution | Print Server | < 8.2 |
References
- https://docs.myq-solution.com/en/print-server/8.2/Release Notes
- https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%Release Notes
- https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-a
- https://docs.myq-solution.com/en/print-server/8.2/Release Notes
- https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%Release Notes
- https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-a
FAQ
What is CVE-2024-22076?
CVE-2024-22076 is a vulnerability with a CVSS score of 9.8 (CRITICAL). MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
How severe is CVE-2024-22076?
CVE-2024-22076 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-22076?
Check the references section above for vendor advisories and patch information. Affected products include: Myq-Solution Print Server.