Is CVE-2018-5408 actively exploited?

No active exploitation of CVE-2018-5408 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2018-5408 be exploited remotely?

Yes. CVE-2018-5408 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2018-5408?

CVE-2018-5408 has a CVSS score of 7.4 (HIGH).

HOME VULNERABILITIESCVE-2018-5408

HIGH

CVE-2018-5408

CWE-295Published: May 8, 2019· Updated: Jun 17, 2026

7.4

CVSS v3.1

Official Description

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.

NVD Source

Technical Analysis

CVE-2018-5408 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 7.4.