SATO CL4NX-J Plus Cookie improper authentication

Vulnerability

The vulnerability is in the Cookie Handler component of SATO CL4NX-J Plus firmware version 1.13.2-u455_r2. By manipulating the cookie with input auth=user,level1,settings; web=true, an attacker can bypass authentication. The issue is classified as critical and has been publicly disclosed [1].

Exploitation

An attacker with access to the local network can craft a malicious cookie containing auth=user,level1,settings; web=true and send it to the device. This results in improper authentication, granting elevated access without valid credentials. The exploitation steps are detailed in the public disclosure [1].

Impact

Successful exploitation allows the attacker to gain unauthorized administrative access to the printer. This could lead to full compromise of the device, including configuration changes, data exfiltration, and potential use as a pivot point within the network.

Mitigation

As of the publication date, no official patch has been released. Users should restrict network access to the device to trusted hosts only, monitor for suspicious cookie-based requests, and contact SATO support for firmware updates. The vulnerability is listed with identifier VDB-241029.