CVE-2018-5408: PrinterLogic Print Management Software fails to validate the management portal SSL certificates
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5408?
The severity of CVE-2018-5408 is rated as high due to potential exploitation by attackers through spoofing.
How do I fix CVE-2018-5408?
To fix CVE-2018-5408, upgrade the PrinterLogic Print Management software to a version later than 18.3.1.96 that includes SSL certificate validation improvements.
What are the implications of CVE-2018-5408?
CVE-2018-5408 could allow an attacker to conduct man-in-the-middle attacks by spoofing a trusted certificate.
Which versions are affected by CVE-2018-5408?
CVE-2018-5408 affects PrinterLogic Print Management software versions up to and including 18.3.1.96.
Is there a workaround for CVE-2018-5408?
While the recommended action is to upgrade, mitigating the risk involves closely monitoring SSL certificate validity and security.