What’s Vulnerable › Vulnerabilities

CVE-2023-27107

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-26 · updated 2026-06-17
• Weakness: CWE-863

Description

Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL.

Affected products

• Myq-Solution Central Server: before 8.2; 8.2 — fixed in 8.2
• Myq-Solution Print Server: before 8.2; 8.2 — fixed in 8.2

How to fix

Upgrade to a fixed version: Myq-Solution Central Server 8.2; Myq-Solution Print Server 8.2. Check the vendor advisory for mitigations.

References

• https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816
• https://gist.github.com/smidtbx10/f8ff1c4977b7f54886c6a52e9ef4e816

Get alerted when CVE-2023-27107 or the next vulnerability affects your stack