CVE-2019-25401

HighPublic PoCDDoS

Published: 18 February 2026

Published

18 February 2026

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score v4 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0042 33.7th percentile

Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2019-25401 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Legacyglobal (inferred from references). Its CVSS base score is 8.7 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 33.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2019-25401 is a denial of service vulnerability in the Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer. The flaw exists in the admin configuration page of the printer's web service, where remote attackers can send crafted POST requests containing malformed 'admin' and 'person' parameters to crash the service and trigger a denial of service condition. It is associated with CWE-400 (Uncontrolled Resource Consumption) and carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Any remote attacker can exploit this vulnerability over the network without authentication or user interaction and with low attack complexity. Exploitation crashes the printer's web service, rendering it unavailable and causing a high-impact denial of service on the affected device.

Advisories and related resources include a Vulncheck advisory on the Bematech printer MP-TH denial of service (vulncheck.com/advisories/bematech-printer-mp-th-denial-of-service) and a proof-of-concept exploit on Exploit-DB (exploit-db.com/exploits/47648). Additional context appears in archived Bematech pages and product listings from Legacy Global. Security practitioners should review these references for any vendor-recommended mitigations, such as firmware patches.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2019-19699

Vulnerability details

Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a denial of service vulnerability in the admin configuration page. Remote attackers can send crafted POST requests with malformed 'admin' and 'person' parameters to crash the printer's web service, causing…

a denial of service condition.

CWE(s): CWE-400

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

attack.mitre.org →

Why these techniques?

CVE directly enables remote exploitation of a public web service vulnerability (CWE-400) to crash the application, matching T1499.004 Endpoint DoS via Application or System Exploitation.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0