CVE-2017-13771: Critical severity lexmark scan to network vulnerability
Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13771?
CVE-2017-13771 has a medium severity rating due to the potential for sensitive information disclosure.
How do I fix CVE-2017-13771?
To address CVE-2017-13771, upgrade Lexmark Scan To Network to version 3.3.0 or later where the vulnerability is patched.
What kind of information is disclosed in CVE-2017-13771?
CVE-2017-13771 allows remote attackers to obtain network configuration credentials stored in plaintext.
Which versions of Lexmark Scan To Network are affected by CVE-2017-13771?
Lexmark Scan To Network versions 3.2.9 and earlier are affected by CVE-2017-13771.
Can CVE-2017-13771 be exploited remotely?
Yes, CVE-2017-13771 can be exploited remotely through specific requests to the affected services.