Impact
The flaw in EduBusinessSolutions Print Shop Pro WebDesk v.18.34 allows a remote attacker to alter the AccessID request parameter and elevate privileges. This is a CWE‑269 privilege‑escalation weakness. The attacker can gain higher level access within the application, potentially enabling configuration changes or other elevated actions. No further details such as arbitrary code execution are provided in the description.
Affected Systems
Print Shop Pro WebDesk v.18.34 from EduBusinessSolutions is the only affected product. The CPE string confirms this version; no other versions or products are documented. Users running this web‑based print‑management solution should verify that they are on the specified version or newer.
Risk and Exploitability
The CVSS score of 9.8 classifies the vulnerability at critical severity. The EPSS score of less than 1 percent indicates a low probability of exploitation at present, and the issue is not listed in CISA KEV. The likely attack vector is remote, via crafted AccessID requests, inferred from the description, and does not require local access. Public exploit code is not known, and the high severity suggests that the risk would increase sharply if an exploit becomes available.
OpenCVE Enrichment