Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12049

Опубликовано: 08 июн. 2018
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:canon:lbp6030w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp6030w:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06293
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

github логотип

GHSA-jjcg-hp49-5xxw

CVSS3: 9.8
github
больше 3 лет назад

** DISPUTED ** A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation.

EPSS

Процентиль: 91%
0.06293
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287