Vulnerability CVE-2010-1558
Published: 2010-05-14   Modified: 2012-02-13

Description:
Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature, and obtain sensitive information, via unknown vectors.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
HP MFP Digital Sending Software Win Local Unauthorized Access
HP
24.05.2010

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:M/Au:N/C:C/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.7/10
6.9/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
None
None
Affected software
HP -> Multifunction peripheral digital sending software 

 References:
http://xforce.iss.net/xforce/xfdb/58618
http://www.securityfocus.com/bid/40147
http://osvdb.org/64661
http://marc.info/?l=bugtraq&m=127376308013422&w=2
http://marc.info/?l=bugtraq&m=127376308013422&w=2
Copyright 2024, cxsecurity.com

 

Back to Top