CVEvulnerability

CVE-2008-0374

7.5 HIGH Published 2008-01-22 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2008-01-22
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-319

Description

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

Affected configurations

• oki c5510mfp firmware 1.01

Weakness · CWE (1)

CWE-319 Cleartext Transmission of Sensitive Information weakness

Referenced by CWE · observed example (2)

CWE-311 Missing Encryption of Sensitive Data weakness
CWE-319 Cleartext Transmission of Sensitive Information weakness

References

http://secunia.com/advisories/28553 Broken Link, Vendor Advisory
http://securityreason.com/securityalert/3569 Third Party Advisory
http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html Broken Link
http://www.securityfocus.com/archive/1/486511/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/27339 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39775 VDB Entry
http://secunia.com/advisories/28553 Broken Link, Vendor Advisory
http://securityreason.com/securityalert/3569 Third Party Advisory
http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html Broken Link
http://www.securityfocus.com/archive/1/486511/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/27339 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39775 VDB Entry