{"api_version":"1","generated_at":"2026-07-23T12:42:40+00:00","cve":"CVE-2017-13771","urls":{"html":"https://cve.report/CVE-2017-13771","api":"https://cve.report/api/cve/CVE-2017-13771.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-13771","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-13771"},"summary":{"title":"CVE-2017-13771","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2017-09-07 13:29:00","updated_at":"2021-07-20 17:15:00"},"problem_types":["CWE-522"],"metrics":[],"references":[{"url":"https://support.lexmark.com/alerts","name":"https://support.lexmark.com/alerts","refsource":"MISC","tags":[],"title":"Lexmark Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2017/Aug/46","name":"20170831 Lexmark Scan to Network (SNF) printer application <= 3.2.9 Information Exposure","refsource":"FULLDISC","tags":["Exploit","Mailing List","Third Party Advisory"],"title":"Full Disclosure: Lexmark Scan to Network (SNF) printer application <= 3.2.9 Information Exposure","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html","name":"http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html","refsource":"MISC","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Lexmark Scan To Network (SNF) 3.2.9 Information Disclosure ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13771","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13771","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"13771","vulnerable":"1","versionEndIncluding":"3.2.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"lexmark","cpe5":"scan_to_network","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2017-13771","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html"},{"name":"20170831 Lexmark Scan to Network (SNF) printer application <= 3.2.9 Information Exposure","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2017/Aug/46"},{"refsource":"MISC","name":"https://support.lexmark.com/alerts","url":"https://support.lexmark.com/alerts"}]}},"nvd":{"publishedDate":"2017-09-07 13:29:00","lastModifiedDate":"2021-07-20 17:15:00","problem_types":["CWE-522"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:lexmark:scan_to_network:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.9","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"13771","Ordinal":"111196","Title":"CVE-2017-13771","CVE":"CVE-2017-13771","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"13771","Ordinal":"1","NoteData":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"13771","Ordinal":"2","NoteData":"2017-09-07","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"13771","Ordinal":"3","NoteData":"2021-07-20","Type":"Other","Title":"Modified"}]}}}