CVE-2023-4957 MEDIUM

CVE-2023-4957: Authentication Bypass on Zebra ZTC

Vendor Zebra Technologies

Product ZTC ZT410

Weakness CWE-288

Published October 11, 2023

Last update August 28, 2025

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Adjacent

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the setvarsResults.cgi file. For this vulnerability to be exploitable, the printers protected mode must be disabled.

Key dates

02Disclosure timeline

October 11, 2023 CVE published

August 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4957 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/288.html

Related vulnerabilities

CVE-2023-4957: Authentication Bypass on Zebra ZTC

01Description

02Disclosure timeline

03References

04Related CVE