CVE-2008-0374 Information disclosure in n/a
Remote attackers can obtain administrative passwords by connecting to specific TCP ports, as the printer sends configuration data in cleartext.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-0374?
CVE-2008-0374 is a high-severity vulnerability in n/a, published on 22 Jan 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.
Weakness: CWE-319
Which versions are affected by CVE-2008-0374?
It affects 1 product.
Products include Oki C5510mfp Firmware.
How do I fix CVE-2008-0374?
No fix has been published for CVE-2008-0374 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-0374 being exploited?
There is no known exploitation of CVE-2008-0374 in the wild and no public exploit code.
Sources
Also known as GHSA-q233-28gw-wmxw.