Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 07/09/2017 Updated: 20/07/2021

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Lexmark Scan To Network (SNF) 3.2.9 and previous versions stores network configuration credentials in plaintext and transmits them in requests, which allows remote malicious users to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
lexmark scan to network

Lexmark Scan to Network (SNF) printer application versions 329 and below suffer from a credential disclosure vulnerability ...

CWE-522 http://seclists.org/fulldisclosure/2017/Aug/46 http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html https://support.lexmark.com/alerts https://nvd.nist.gov https://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-13771

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect