SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2004-2154

CRITICAL · CVSS 9.8 EPSS 2.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2004-2154
Severity
CRITICAL
CVSS
9.8
EPSS
2.07%

Original NVD Description

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.