CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

CVSS v3 7.5 HIGH
CVSS v2.0 10.0 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/28553	Broken Link Vendor Advisory
http://securityreason.com/securityalert/3569	Third Party Advisory
http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html	Broken Link
http://www.securityfocus.com/archive/1/486511/100/0/threaded	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/27339	Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39775	VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:oki:c5510mfp_firmware:1.01:*:*:*:*:*:*:*

cpe:2.3:h:oki:c5510mfp:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-01-22 20:00

Updated : 2024-01-25 20:41

NVD link : CVE-2008-0374

Mitre link : CVE-2008-0374

CVE.ORG link : CVE-2008-0374

JSON object : View

Products Affected

oki

c5510mfp
c5510mfp_firmware

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2008-0374", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2008-01-22T20:00:00.000", "references": [{"url": "http://secunia.com/advisories/28553", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3569", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/486511/100/0/threaded", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27339", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39775", "tags": ["VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777."}, {"lang": "es", "value": "OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, y Web Page 1.00 envia la configuraci\u00f3n de la impresora en texto plano, lo cual permite a atacantes remotos obtener la contrase\u00f1a del administrador a trav\u00e9s de la conexi\u00f3n TCP puertos 5548 o 7777."}], "lastModified": "2024-01-25T20:41:45.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:oki:c5510mfp_firmware:1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5362609-08DD-42AC-811A-52F59ABF6576"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:oki:c5510mfp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6B1AF628-BB40-454B-85B0-B39047E75F52"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}