What’s Vulnerable › Vulnerabilities

CVE-2017-9632

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-311

Description

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.

Affected products

• Pdqinc Laserjet Firmware: all versions
• Pdqinc Laserwash 360 Firmware: all versions
• Pdqinc Laserwash 360 Plus Firmware: all versions
• Pdqinc Laserwash Autoxpress Firmware: all versions
• Pdqinc Laserwash Autoxpress Plus Firmware: all versions
• Pdqinc Laserwash G5 Firmware: all versions
• Pdqinc Laserwash G5 S Firmware: all versions
• Pdqinc Laserwash M5 Firmware: all versions
• Pdqinc Protouch Autogloss Firmware: all versions
• Pdqinc Protouch Icon Firmware: all versions
• Pdqinc Protouch Tandem Firmware: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03

Get alerted when CVE-2017-9632 or the next vulnerability affects your stack