What’s Vulnerable › Vulnerabilities

CVE-2017-13771

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-09-07 · updated 2026-06-17
• Weakness: CWE-522

Description

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.

Affected products

• Lexmark Scan To Network: through 3.2.9

References

• http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Aug/46
• https://support.lexmark.com/alerts
• http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Aug/46
• https://support.lexmark.com/alerts

Get alerted when CVE-2017-13771 or the next vulnerability affects your stack