CVE-2019-10960
Estado: ModificadaAlta (7.5)—
Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.70%
- Percentil entre todas las CVEs puntuadas: 76
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
CWE
- CWE-522
- CWE-522
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-10960",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "n/a",
"product": "Zebra Industrial Printers All Versions",
"versions": [
{
"status": "affected",
"version": "Zebra Industrial Printers All Versions"
}
]
}
]
}
],
"published": "2019-08-20T21:15:12.137",
"references": [
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-232-01",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-232-01",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-522"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-522"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel."
},
{
"lang": "es",
"value": "Impresoras industriales Zebra Todas las versiones, las impresoras Zebra se envían con acceso ilimitado del usuario final a las opciones del panel frontal. Si se aplica la opción de usar un código de acceso para limitar la funcionalidad del panel frontal, se pueden enviar paquetes especialmente diseñados a través de la misma red a un puerto de la impresora y la impresora responderá con una variedad de información que incluye el código de acceso del panel frontal para la impresora Una vez que se recupera el código de acceso, un atacante debe tener acceso físico al panel frontal de la impresora para ingresar el código de acceso y acceder a la funcionalidad completa del panel frontal."
}
],
"lastModified": "2026-06-17T02:12:00.423",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt610_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A119F6D7-D88E-4FD1-8408-A35991E26780"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt610:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D1917FD-8BD8-487B-AC8B-A768E1C1855E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt620_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDA1D4DE-85F7-476A-8CDE-A5BDC7CA4EAB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt620:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "658E480E-68A8-4C5D-A4F2-BB6AA7949C3B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt510_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "335FE90A-899E-4BA7-84DD-33EEB5A51EE6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt510:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CDF177D2-B910-4382-92FC-F373D7A39A65"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt410_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D8E7D44-FA01-4F80-B5E2-6986CF68EFEB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt410:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D8C8D38-0086-4586-83CA-FA7B5D4AF882"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt420_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03512F69-95D2-42F8-A8A9-3E61AE61D53B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt420:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9AE954D7-60E8-43CC-A053-000E1B5832C8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt220_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C480FC73-3803-4945-86FD-3069148DAD81"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt220:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3374C0AA-612B-4373-ADB3-AD0E9BFCE24E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:zt230_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF0710CF-57D2-414A-97AB-3DBCD8BAB7D4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:zt230:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C73A0C8F-0811-454F-BCAB-26434BAB7912"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zebra:220xi4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7099010-4BBC-4986-8C7C-823FA37649D9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zebra:220xi4:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4E82AFA9-C1C0-4358-A3BB-7F1BBE2C8053"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}