CVE-2017-13771

Critical

Published: 07/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Lexmark Scan To Network (SNF) version 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests. This allows remote attackers to obtain sensitive information via specific requests.

Risk Assessment

Attackers can gain access to confidential data, potentially leading to a breach of network and data security for the organization.

Recommendation

It is recommended to update to the latest version of the software that improves the security of storing and transmitting authentication data.

Original NVD description (English source)

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.