pentester.land· Oct 17, 2022· by Alex Plaskett (@alexjplaskett), Cedric Halbronn (@saidelike)

Toner Deaf – Printing your next persistence (Hexacon 2022)

Target Program: Lexmark

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Path traversal#Arbitrary file write#RCE#Printer hacking