peter bassill · operator
$ cve CVE-2019-9505 JSON

CVE-2019-9505

9.8
CRITICAL · CVSS 3.1 · EPSS 3.5% (pctl 89)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.45% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-159
On CISA KEVno
Public exploitnone known
Published2019-05-08
Last modified2026-06-17

Affected (1)

VendorProduct
printerlogicprint management

References

→ the Explorer  ·  watch your stack  ·  NVD