Konica Bizhub Multifunction Printers Improper Handling of Exceptional Conditions (CVE-2021-20870)

When scan transmission is interrupted by a network error, a physically accessible attacker could steal the scanned image data by removing the HDD before the scan job times out. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504857; scriptversion"1.2";...

Konica Bizhub Multifunction Printers Insertion of Sensitive Information into Externally-Accessible File or Directory (CVE-2025-8452)

Through the use of eSCL or SNMP protocols, an attacker can retrieve the serial number of a printer. By applying the attack technique described in CVE-2024-51978, the default administrator password can be derived from the obtained serial number. Consequently, if the administrator password has not...

Konica Bizhub Multifunction Printers Uncaught Exception (CVE-2025-54777)

Importing a malformed file in Registration of Certification Information for S/MIME for Email Destination causes the Web Connection to stop. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504856; scriptversion"1.2";...

Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2025-6081)

An authenticated attacker can disclose the password of a configured external service. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504862; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/02/20"; scriptcveid"CVE-2025-6081";...

Konica Bizhub Multifunction Printers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-20869)

When using external authentication with an LDAP server, a remote attacker could steal specific authentication information in Administrator settings by sending specific SOAP messages. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504863; scriptversion"1.2";...

Konica Bizhub Multifunction Printers Cross-site Scripting (CVE-2025-5884)

Cross-site scripting vulnerability CWE94, CWE-79 was found in the specific input fields of the Web Connection. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504858; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/02/20";...

Honeywell Multiple Industrial Printers Improper Privilege Management (CVE-2017-5671)

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...

HP LaserJet Pro Printers Information Disclosure (HPSBPI04074)

Certain HP LaserJet Pro print products is potentially vulnerable to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

EUVD-2025-175347

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...

CVE-2025-12785

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...

CVE-2025-12784

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...

CVE-2025-12784

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...

CVE-2025-12785

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server...

PT-2025-46872

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro printers affected versions not specified Description Certain HP LaserJet Pro printers may be susceptible to information disclosure, potentially leading to credential exposure. This can occur by altering the scan/send destinatio...

Certain HP LaserJet and OfficeJet Pro Printers – Potential Information Disclosure

Certain HP LaserJet and OfficeJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Update your printer firmware...

PT-2025-46873

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro printers affected versions not specified Description Certain HP LaserJet Pro printers may be susceptible to information disclosure, potentially exposing credentials. This can occur by altering the scan/send destination address...

Lexmark Printers Improper Validation of Integrity Check Value (CVE-2023-50738)

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified. Lexmark documentation recommends that access to the Firmware Updates be restricted to trusted personnel. %NASLMINLEVEL 80900 C Tenable, Inc...

Lexmark Printers Integer Overflow or Wraparound (CVE-2023-26065)

An integer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503905; scriptversion"1.3";...

Lexmark Printers CWE CATEGORY: Pointer Issues (CVE-2023-50735)

A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503896; scriptversion"1.6";...

Lexmark Printers Improper Input Validation (CVE-2023-26070)

An input validation vulnerability has been identified in the SNMP feature in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503895; scriptversion"1.3";...