MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Print_server | Myq-solution | * | 8.2 (excluding) |
| Print_server | Myq-solution | 8.2 (including) | 8.2 (including) |
| Print_server | Myq-solution | 8.2-beta1 (including) | 8.2-beta1 (including) |
| Print_server | Myq-solution | 8.2-patch1 (including) | 8.2-patch1 (including) |
| Print_server | Myq-solution | 8.2-patch10 (including) | 8.2-patch10 (including) |
| Print_server | Myq-solution | 8.2-patch11 (including) | 8.2-patch11 (including) |
| Print_server | Myq-solution | 8.2-patch12 (including) | 8.2-patch12 (including) |
| Print_server | Myq-solution | 8.2-patch13 (including) | 8.2-patch13 (including) |
| Print_server | Myq-solution | 8.2-patch14 (including) | 8.2-patch14 (including) |
| Print_server | Myq-solution | 8.2-patch15 (including) | 8.2-patch15 (including) |
| Print_server | Myq-solution | 8.2-patch16 (including) | 8.2-patch16 (including) |
| Print_server | Myq-solution | 8.2-patch17 (including) | 8.2-patch17 (including) |
| Print_server | Myq-solution | 8.2-patch18 (including) | 8.2-patch18 (including) |
| Print_server | Myq-solution | 8.2-patch19 (including) | 8.2-patch19 (including) |
| Print_server | Myq-solution | 8.2-patch2 (including) | 8.2-patch2 (including) |
| Print_server | Myq-solution | 8.2-patch20 (including) | 8.2-patch20 (including) |
| Print_server | Myq-solution | 8.2-patch21 (including) | 8.2-patch21 (including) |
| Print_server | Myq-solution | 8.2-patch22 (including) | 8.2-patch22 (including) |
| Print_server | Myq-solution | 8.2-patch23 (including) | 8.2-patch23 (including) |
| Print_server | Myq-solution | 8.2-patch24 (including) | 8.2-patch24 (including) |
| Print_server | Myq-solution | 8.2-patch25 (including) | 8.2-patch25 (including) |
| Print_server | Myq-solution | 8.2-patch26 (including) | 8.2-patch26 (including) |
| Print_server | Myq-solution | 8.2-patch27 (including) | 8.2-patch27 (including) |
| Print_server | Myq-solution | 8.2-patch28 (including) | 8.2-patch28 (including) |
| Print_server | Myq-solution | 8.2-patch29 (including) | 8.2-patch29 (including) |
| Print_server | Myq-solution | 8.2-patch3 (including) | 8.2-patch3 (including) |
| Print_server | Myq-solution | 8.2-patch30 (including) | 8.2-patch30 (including) |
| Print_server | Myq-solution | 8.2-patch31 (including) | 8.2-patch31 (including) |
| Print_server | Myq-solution | 8.2-patch32 (including) | 8.2-patch32 (including) |
| Print_server | Myq-solution | 8.2-patch33 (including) | 8.2-patch33 (including) |
| Print_server | Myq-solution | 8.2-patch34 (including) | 8.2-patch34 (including) |
| Print_server | Myq-solution | 8.2-patch35 (including) | 8.2-patch35 (including) |
| Print_server | Myq-solution | 8.2-patch36 (including) | 8.2-patch36 (including) |
| Print_server | Myq-solution | 8.2-patch37 (including) | 8.2-patch37 (including) |
| Print_server | Myq-solution | 8.2-patch38 (including) | 8.2-patch38 (including) |
| Print_server | Myq-solution | 8.2-patch39 (including) | 8.2-patch39 (including) |
| Print_server | Myq-solution | 8.2-patch4 (including) | 8.2-patch4 (including) |
| Print_server | Myq-solution | 8.2-patch40 (including) | 8.2-patch40 (including) |
| Print_server | Myq-solution | 8.2-patch41 (including) | 8.2-patch41 (including) |
| Print_server | Myq-solution | 8.2-patch42 (including) | 8.2-patch42 (including) |
| Print_server | Myq-solution | 8.2-patch5 (including) | 8.2-patch5 (including) |
| Print_server | Myq-solution | 8.2-patch6 (including) | 8.2-patch6 (including) |
| Print_server | Myq-solution | 8.2-patch7 (including) | 8.2-patch7 (including) |
| Print_server | Myq-solution | 8.2-patch8 (including) | 8.2-patch8 (including) |
| Print_server | Myq-solution | 8.2-patch9 (including) | 8.2-patch9 (including) |
| Print_server | Myq-solution | 8.2-rc1 (including) | 8.2-rc1 (including) |
| Print_server | Myq-solution | 8.2-rc2 (including) | 8.2-rc2 (including) |
| Print_server | Myq-solution | 8.2-rc3 (including) | 8.2-rc3 (including) |
References
- https://docs.myq-solution.com/en/print-server/8.2/
- https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29
- https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076/
- https://docs.myq-solution.com/en/print-server/8.2/
- https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29
- https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076/