Lucene search

K
cveMitreCVE-2008-0374
HistoryJan 22, 2008 - 8:00 p.m.

CVE-2008-0374

2008-01-2220:00:00
CWE-319
mitre
web.nvd.nist.gov
26
oki
c5510mfp
printer
cve-2008-0374
security
vulnerability
remote attack
administrative password
cleartext
tcp port 5548
tcp port 7777

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.004

Percentile

73.9%

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

Affected configurations

Nvd
Node
okic5510mfp_firmwareMatch1.01
AND
okic5510mfpMatch-
VendorProductVersionCPE
okic5510mfp_firmware1.01cpe:2.3:o:oki:c5510mfp_firmware:1.01:*:*:*:*:*:*:*
okic5510mfp-cpe:2.3:h:oki:c5510mfp:-:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.004

Percentile

73.9%

Related for CVE-2008-0374