{"id":"CVE-2017-13771","aliases":["EUVD-2017-5286","GHSA-9gqv-7c54-r6w3"],"status":"published","title":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in...","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03358,"percentile":0.88788,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-522"],"published":"2017-09-07T13:00:00Z","modified":"2026-06-17T01:05:08Z","products":[{"vendor":"lexmark","product":"scan_to_network"}],"references":[{"url":"http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2017/Aug/46","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://support.lexmark.com/alerts","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13771"},{"url":"https://github.com/advisories/GHSA-9gqv-7c54-r6w3"}],"sources":{"cve":[{"id":"CVE-2017-13771","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","status":"published","published":"2017-09-07T13:00:00Z","modified":"2024-08-05T19:05:20.047Z","updated_at":"2026-11-02T14:33:17.903346Z"}],"euvd":[{"id":"EUVD-2017-5286","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","status":"published","published":"2017-09-07T13:00:00Z","modified":"2024-08-05T19:05:20Z","updated_at":"2026-11-03T02:23:19.185271Z"}],"ghsa":[{"id":"GHSA-9gqv-7c54-r6w3","title":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in...","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","status":"published","published":"2022-05-13T01:08:24Z","modified":"2023-02-01T05:03:10Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:50:01.590535Z"}],"nvd":[{"id":"CVE-2017-13771","description":"Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.","status":"published","published":"2017-09-07T13:29:00.653Z","modified":"2026-06-17T01:05:08.96Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:03:58.85945Z"}]}}