What’s Vulnerable › Vulnerabilities

CVE-2019-10960

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-20 · updated 2026-06-17
• Weakness: CWE-522

Description

Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.

Affected products

• Zebra 220Xi4 Firmware: all versions
• Zebra Zt220 Firmware: all versions
• Zebra Zt230 Firmware: all versions
• Zebra Technologies ZTC ZT410: all versions
• Zebra Zt420 Firmware: all versions
• Zebra Zt510 Firmware: all versions
• Zebra Zt610 Firmware: all versions
• Zebra Zt620 Firmware: all versions

References

• https://www.us-cert.gov/ics/advisories/icsa-19-232-01
• https://www.us-cert.gov/ics/advisories/icsa-19-232-01

Get alerted when CVE-2019-10960 or the next vulnerability affects your stack