CVE-2014-9002 Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action.
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lantronix xprintserver | All versions | No fix listed |
References
- i.imgur.com exploit
- packetstormsecurity.com exploit
- 20141112 Lantronix xPrintServer Code execution and CSRF vulnerability exploit mailing-list
- xprintserver-version-command-exec(98644) vdb-entry