Vulnerability CVE-2011-0279
Published: 2011-03-07   Modified: 2012-02-13

Description:
HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.

Type:

CWE-287

 (Improper Authentication)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
HP -> Multifunction peripheral digital sending software 

 References:
http://xforce.iss.net/xforce/xfdb/65866
http://www.vupen.com/english/advisories/2011/0561
http://www.securitytracker.com/id?1025155
http://www.securityfocus.com/bid/46679
http://secunia.com/advisories/43618
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104
Copyright 2024, cxsecurity.com

 

Back to Top