CVE-2017-13771

Опубликовано: 07 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.

Ссылки

http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Aug/46
Exploit
Mailing List
Third Party Advisory
https://support.lexmark.com/alerts
http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Aug/46
Exploit
Mailing List
Third Party Advisory
https://support.lexmark.com/alerts

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lexmark:scan_to_network:*:*:*:*:*:*:*:*

Версия до 3.2.9 (включая)

EPSS

Процентиль: 81%

0.01532

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-9gqv-7c54-r6w3