CVE-2017-9630 An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpre...
CriticalCVSS 9.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pdqinc laserwash g5 firmware | All versions | No fix listed |
| pdqinc laserwash g5 s firmware | All versions | No fix listed |
| pdqinc laserwash m5 firmware | All versions | No fix listed |
| pdqinc laserwash 360 firmware | All versions | No fix listed |
| pdqinc laserwash 360 plus firmware | All versions | No fix listed |
| pdqinc laserwash autoxpress firmware | All versions | No fix listed |
| pdqinc laserwash autoxpress plus firmware | All versions | No fix listed |
| pdqinc laserjet firmware | All versions | No fix listed |
| pdqinc protouch tandem firmware | All versions | No fix listed |
| pdqinc protouch icon firmware | All versions | No fix listed |
| pdqinc protouch autogloss firmware | All versions | No fix listed |
References
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource