CVE Feed

    Dashboard / CVE / CVE-2023-4957

    CVE-2023-4957

    A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the setvarsResults.cgi file. For this vulnerability to be exploitable, the printers protected mode must be disabled.

    Published:Oct 11, 2023
    Last Modified:Aug 28, 2025
    EPS:Oct 11, 2023
    EPSS Score:0.00005
    CVSS Score:5.4

    Affected Products

    Vendor
    Zebra
    Product
    Zt410
    Vendor
    Zebra
    Product
    Zt410 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-127 Directory Indexing
    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High