PT-2008-2007 · Oki · Oki C5510Mfp Printer

Adrian Leuenberger · Publicado 2008-01-22 · Atualizado 2024-01-25 · CVE-2008-0374

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00

Description The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration in cleartext.

Recommendations For OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00, consider restricting access to TCP ports 5548 and 7777 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2008-0374

Produtos afetados

Oki C5510Mfp Printer

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/39775 · Nota
• http://csnc.ch/en/modules/news/news_0004.html_1394092626.html · Nota
• http://securityfocus.com/bid/27339 · Nota
• http://securityfocus.com/archive/1/486511/100/0/threaded · Nota
• http://secunia.com/advisories/28553 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0374 · Nota
• http://securityreason.com/securityalert/3569 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0374 · Nota de Segurança