critical9.8
CVE-2017-13771
Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attac…
Impact
Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lexmark | Scan To Network | through 3.2.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2017/Aug/46
- https://support.lexmark.com/alerts
- http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2017/Aug/46
- https://support.lexmark.com/alerts