CVE-2017-13771 Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via....
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark scan to network | <= 3.2.9 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20170831 Lexmark Scan to Network (SNF) printer application <= 3.2.9 Information Exposure exploit mailing-list third-party-advisory
- support.lexmark.com