critical9.8
CVE-2017-9632
A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWa…
Impact
A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pdqinc | Laserwash G5 Firmware | All versions |
| Pdqinc | Laserwash G5 S Firmware | All versions |
| Pdqinc | Laserwash M5 Firmware | All versions |
| Pdqinc | Laserwash 360 Firmware | All versions |
| Pdqinc | Laserwash 360 Plus Firmware | All versions |
| Pdqinc | Laserwash Autoxpress Firmware | All versions |
| Pdqinc | Laserwash Autoxpress Plus Firmware | All versions |
| Pdqinc | Laserjet Firmware | All versions |
| Pdqinc | Protouch Tandem Firmware | All versions |
| Pdqinc | Protouch Icon Firmware | All versions |
| Pdqinc | Protouch Autogloss Firmware | All versions |