CVE-2011-0279 - Vulnerability Details - OpenCVE

HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hp	Multifunction Peripheral Digital Sending Software

Configuration 1 [-]

cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.91.00:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104
http://secunia.com/advisories/43618
http://www.securityfocus.com/bid/46679
http://www.securitytracker.com/id?1025155
http://www.vupen.com/english/advisories/2011/0561
https://exchange.xforce.ibmcloud.com/vulnerabilities/65866

History

No history.

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2011-03-07T20:00:00

Updated: 2024-08-06T21:51:07.789Z

Reserved: 2010-12-23T00:00:00

Link: CVE-2011-0279

Vulnrichment

No data.

NVD

Status : Modified

Published: 2011-03-07T21:00:01.563

Modified: 2024-11-21T01:23:41.757

Link: CVE-2011-0279

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-03-02T00:00:00", "descriptions": [{"lang": "en", "value": "HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp"}, "references": [{"name": "HPSBPI02640", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "ADV-2011-0561", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/0561"}, {"name": "hp-mfpdigitalsending-sec-bypass(65866)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65866"}, {"name": "1025155", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1025155"}, {"name": "SSRT100410", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "43618", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/43618"}, {"name": "46679", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/46679"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "hp-security-alert@hp.com", "ID": "CVE-2011-0279", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "HPSBPI02640", "refsource": "HP", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "ADV-2011-0561", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/0561"}, {"name": "hp-mfpdigitalsending-sec-bypass(65866)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65866"}, {"name": "1025155", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1025155"}, {"name": "SSRT100410", "refsource": "HP", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "43618", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/43618"}, {"name": "46679", "refsource": "BID", "url": "http://www.securityfocus.com/bid/46679"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:51:07.789Z"}, "title": "CVE Program Container", "references": [{"name": "HPSBPI02640", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "ADV-2011-0561", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/0561"}, {"name": "hp-mfpdigitalsending-sec-bypass(65866)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65866"}, {"name": "1025155", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1025155"}, {"name": "SSRT100410", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"name": "43618", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/43618"}, {"name": "46679", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/46679"}]}]}, "cveMetadata": {"assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "assignerShortName": "hp", "cveId": "CVE-2011-0279", "datePublished": "2011-03-07T20:00:00", "dateReserved": "2010-12-23T00:00:00", "dateUpdated": "2024-08-06T21:51:07.789Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.91.00:*:*:*:*:*:*:*", "matchCriteriaId": "3B00FCAC-5774-4080-8487-9266647714A2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication."}, {"lang": "es", "value": "HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) v4.91.00 no configura correctamente la autenticaci\u00f3n de dispositivos gestionados dentro de plantillas de dispositivos, permite a los atacantes acceder a estos dispositivos a trav\u00e9s de acciones que estaban destinadas para requerir autenticaci\u00f3n."}], "id": "CVE-2011-0279", "lastModified": "2024-11-21T01:23:41.757", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-03-07T21:00:01.563", "references": [{"source": "hp-security-alert@hp.com", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"source": "hp-security-alert@hp.com", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"source": "hp-security-alert@hp.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43618"}, {"source": "hp-security-alert@hp.com", "url": "http://www.securityfocus.com/bid/46679"}, {"source": "hp-security-alert@hp.com", "url": "http://www.securitytracker.com/id?1025155"}, {"source": "hp-security-alert@hp.com", "url": "http://www.vupen.com/english/advisories/2011/0561"}, {"source": "hp-security-alert@hp.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65866"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43618"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/46679"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1025155"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2011/0561"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65866"}], "sourceIdentifier": "hp-security-alert@hp.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}