PT-2017-13090 · Lexmark · Lexmark Scan To Network

Published 2017-09-07 · Updated 2021-07-20 · CVE-2017-13771

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lexmark Scan To Network (SNF) versions 3.2.9 and earlier

Description The issue allows remote attackers to obtain sensitive information. This is due to network configuration credentials being stored in plaintext and transmitted in requests. Specifically, requests to "cgi-bin/direct/printer/prtappauth/apps/snfDestServlet" or "cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet" are affected.

Recommendations For Lexmark Scan To Network (SNF) versions 3.2.9 and earlier, consider restricting access to the affected API endpoints "cgi-bin/direct/printer/prtappauth/apps/snfDestServlet" and "cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet" to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2017-13771

Affected Products

Lexmark Scan To Network

References · 5

• 🔥 http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2017/Aug/46 · Exploit
• https://osv.dev/vulnerability/CVE-2017-13771 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13771 · Security Note
• https://support.lexmark.com/alerts · Note