PT-2011-2253 · Hewlett Packard · Hp Multifunction Peripheral (Mfp) Digital Sending

Published 2011-03-07 · Updated 2017-08-17 · CVE-2011-0279

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) version 4.91.00

Description The issue arises from improper configuration of authentication settings for managed devices within device templates. This allows attackers to access these devices through actions intended to require authentication.

Recommendations For HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) version 4.91.00, consider reconfiguring the authentication settings of managed devices within device templates to ensure proper access control until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-0279

Affected Products

Hp Multifunction Peripheral (Mfp) Digital Sending

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-0279 · Security Note
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104 · Vendor Advisory
• http://secunia.com/advisories/43618 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0561 · Note
• http://securitytracker.com/id?1025155 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65866 · Note
• http://securityfocus.com/bid/46679 · Note