What’s Vulnerable › Vulnerabilities

CVE-2022-40306

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-15 · updated 2026-06-17

Description

The login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) before 5.5.2 (July 2023) performs expensive RSA key-generation operations, which allows attackers to cause a denial of service (DoS) by requesting that form repeatedly.

Affected products

• Ecisolutions Printanista Managed Print Service: through 2022-06-27

References

• https://releasenotes.printanista.net/PrintanistaHub
• https://www.ecisolutions.com/products/printanista-hub/
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-042.txt
• https://www.ecisolutions.com/products/printanista-hub/
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-042.txt

Get alerted when CVE-2022-40306 or the next vulnerability affects your stack