CVE-2011-0279

HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.

Score

CVSS 2.0 2.1 Low

Status

Modified - hp-security-alert@hp.com

Published

2011-03-07

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Multifunction Peripheral Digital Sending Software (Hp)

References

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02738104
• http://secunia.com/advisories/43618
• http://www.securityfocus.com/bid/46679
• http://www.securitytracker.com/id?1025155
• http://www.vupen.com/english/advisories/2011/0561
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65866