Auth bypass in HP Multifunction Peripheral Digital Sending Software
CVE-2011-0279
HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.
Vulnerability class: Broken Authentication
EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.
Affected products
- Hp Multifunction_peripheral_digital_sending_software — versions 4.91.00
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_VUPEN)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)