CVE-2019-10960: High severity zebra zt610 vulnerability

Published Aug 20, 2019
·
Updated

Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.

Affected Software

16 affected components
Zebra Zt610 Firmware
Zebra Zt610
Zebra Zt620 Firmware
Zebra Zt620
Zebra Zt510 Firmware
Zebra Zt510
Zebra Zt410 Firmware
Zebra ZT410
Zebra Zt420 Firmware
Zebra Zt420
Zebra Zt220 Firmware
Zebra Zt220
Zebra Zt230 Firmware
Zebra Zt230
Zebra 220xi4 Firmware
Zebra 220xi4

Event History

Aug 20, 2019
CVE Published
via MITRE·08:53 PM
Data Sourced
via MITRE·08:53 PM
DescriptionWeakness

Frequently Asked Questions

1

What is the vulnerability ID for this Zebra Industrial Printers vulnerability?

The vulnerability ID for this Zebra Industrial Printers vulnerability is CVE-2019-10960.

2

What is the severity level of CVE-2019-10960?

The severity level of CVE-2019-10960 is high with a value of 7.5.

3

Which software versions are affected by CVE-2019-10960?

The Zebra Industrial Printers versions affected by CVE-2019-10960 include Zebra Zt610 Firmware, Zebra Zt620 Firmware, Zebra Zt510 Firmware, Zebra Zt410 Firmware, Zebra Zt420 Firmware, Zebra Zt220 Firmware, Zebra Zt230 Firmware, and Zebra 220xi4 Firmware.

4

How can I fix CVE-2019-10960?

To fix CVE-2019-10960, it is recommended to apply the option to use a passcode to limit the functionality of the front panel of the Zebra Industrial Printers.

5

Where can I find more information about CVE-2019-10960?

You can find more information about CVE-2019-10960 on the official US-CERT website at this link: https://www.us-cert.gov/ics/advisories/icsa-19-232-01

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203