CVE-2016-1896 in Printer

Résumé

par MITRE

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 12/01/2016
• Divulgation: 27/01/2016
• Modérer: accepté
• Entrée: VDB-80710
• CPE: prêt
• CWE: CWE-264 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.03259
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1896
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1896
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1896/