CVE-2014-9003

Lantronix xPrintServer - Cross-Site Request Forgery via RPC Action

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/98645

Exploit mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2014/Nov/24

Exploit x_refsource_misc

http://packetstormsecurity.com/files/129091/Lantronix-xPrintServer-Remote-Command-Execution-CSRF.html

Scores

EPSS 0.0106

EPSS Percentile 60.6%

Details

CWE

CWE-352

Status published

Products (1)

lantronix/xprintserver

Published Nov 20, 2014

Tracked Since Feb 18, 2026