PT-2008-2007 · Oki · Oki C5510Mfp Printer

Adrian Leuenberger · Published 2008-01-22 · Updated 2024-01-25 · CVE-2008-0374

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00

Description The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration in cleartext.

Recommendations For OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00, consider restricting access to TCP ports 5548 and 7777 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2008-0374

Affected Products

Oki C5510Mfp Printer

References · 8

• http://secunia.com/advisories/28553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0374 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39775 · Note
• http://csnc.ch/en/modules/news/news_0004.html_1394092626.html · Note
• http://securityfocus.com/bid/27339 · Note
• http://securityfocus.com/archive/1/486511/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0374 · Note
• http://securityreason.com/securityalert/3569 · Note