Lucene search

[email protected]CVE-2017-9630

HistoryAug 07, 2017 - 8:29 a.m.

CVE-2017-9630

2017-08-0708:29:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2017-9630

improper authentication

pdq manufacturing

laserwash

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct.

Affected configurations

NVD

Node

pdqinclaserwash_g5_firmwareMatch-

AND

pdqinclaserwash_g5Match-

Node

pdqinclaserwash_g5_s_firmwareMatch-

AND

pdqinclaserwash_g5_sMatch-

Node

pdqinclaserwash_m5_firmwareMatch-

AND

pdqinclaserwash_m5Match-

Node

pdqinclaserwash_360_firmwareMatch-

AND

pdqinclaserwash_360Match-

Node

pdqinclaserwash_360_plus_firmwareMatch-

AND

pdqinclaserwash_360_plusMatch-

Node

pdqinclaserwash_autoxpress_firmwareMatch-

AND

pdqinclaserwash_autoxpressMatch-

Node

pdqinclaserwash_autoxpress_plus_firmwareMatch-

AND

pdqinclaserwash_autoxpress_plusMatch-

Node

pdqinclaserjet_firmwareMatch-

AND

pdqinclaserjetMatch-

Node

pdqincprotouch_tandem_firmwareMatch-

AND

pdqincprotouch_tandemMatch-

Node

pdqincprotouch_icon_firmwareMatch-

AND

pdqincprotouch_iconMatch-

Node

pdqincprotouch_autogloss_firmwareMatch-

AND

pdqincprotouch_autoglossMatch-

CPENameOperatorVersion
pdqinc:laserwash_g5_firmwarepdqinc laserwash g5 firmwareeq-

CPE	Name	Operator	Version
pdqinc:laserwash_g5_firmware	pdqinc laserwash g5 firmware	eq	-

CNA Affected

[
  {
    "product": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-208-03

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

Related for CVE-2017-9630

prion1 cvelist1 nvd1 ics1