CVE-2018-5409: PrinterLogic Print Management Software updates and executes the code without origin and code verification

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-08 · updated 2026-06-17
Weakness: CWE-494

Description

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.

Affected products

PrinterLogic Management Software: through 18.3.1.96

References

http://www.securityfocus.com/bid/108285
https://kb.cert.org/vuls/id/169249/
http://www.securityfocus.com/bid/108285
https://kb.cert.org/vuls/id/169249/

Get alerted when CVE-2018-5409 or the next vulnerability affects your stack