CVE-2008-5158 Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clientsoftware wincome mpd total | <= 3.0.2.623 | No fix listed |
References
- aluigi.org
- aluigi.org
- 28763 third-party-advisory vendor-advisory
- 4610 third-party-advisory
- 20080204 Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 mailing-list
- 27614 vdb-entry
- ADV-2008-0410 vdb-entry