CVE-2018-17944: Infoleak
On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-17944?
CVE-2018-17944 is a vulnerability that affects certain Lexmark devices and allows a malicious administrator to discover LDAP or SMTP credentials.
How can a malicious administrator exploit CVE-2018-17944?
A malicious administrator can exploit CVE-2018-17944 by changing the LDAP or SMTP server's hostname to one they control and capturing the credentials sent there.
Which Lexmark devices are affected by CVE-2018-17944?
The Lexmark devices affected by CVE-2018-17944 include Lexmark Cx725h Firmware, Lexmark MC3224i, Lexmark Cx820, Lexmark Cx825, Lexmark MC3224i, Lexmark MC3224i, Lexmark MC3224i, Lexmark Xc6152 Firmware, Lexmark MC3224i, Lexmark Xc8160 Firmware, and Lexmark MC3224i.
What is the severity of CVE-2018-17944?
CVE-2018-17944 has a severity rating of 4.9, which is considered medium.
How can the CVE-2018-17944 vulnerability be fixed?
To fix the CVE-2018-17944 vulnerability, it is recommended to update the firmware of the affected Lexmark devices and follow the recommendations provided by Lexmark.