OKI C5510MFP Printer Unauthorized Access Vulnerability

Bugtraq ID:	27339
Class:	Input Validation Error
CVE:	CVE-2008-0375 CVE-2008-0374
Remote:	Yes
Local:	No
Published:	Jan 17 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	Adrian Leuenberger is credited with the discovery of this vulnerability.
Vulnerable:	OKI Printing Solutions C5510 MFP Printer 0
Not Vulnerable:

OKI C5510MFP Printer Unauthorized Access Vulnerability

The OKI C5510MFP Printer is prone to an unauthorized-access vulnerability because it obtains configuration details and administrator passwords in an insecure manner.

An attacker can exploit this issue to set arbitrary printer configuration settings and administrative passwords. The impact of a successful exploit will vary depending on the settings reconfigured.

OKI C5510MFP Printer Unauthorized Access Vulnerability

An attacker can exploit this issue using readily available networking tools.

OKI C5510MFP Printer Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OKI C5510MFP Printer Unauthorized Access Vulnerability

References:

• Vendor Homepage (OKI Printing Solutions)
  
• OKI C5510MFP Printer Password Disclosure ("Adrian Leuenberger" )