CVEvulnerability

CVE-2017-9632

9.8 CRITICAL Published 2017-08-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-311

Description

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.

Affected configurations

• pdqinc laserwash g5 firmware • pdqinc laserwash g5 s firmware • pdqinc laserwash m5 firmware • pdqinc laserwash 360 firmware • pdqinc laserwash 360 plus firmware • pdqinc laserwash autoxpress firmware • pdqinc laserwash autoxpress plus firmware • pdqinc laserjet firmware • pdqinc protouch tandem firmware • pdqinc protouch icon firmware • pdqinc protouch autogloss firmware

Related

Weakness · CWE (1)

  • CWE-311 Missing Encryption of Sensitive Data weakness

References