Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2011-0279

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HP MFP Digital Sending Software是一款数字传送软件，可将文件进行OCR 识别后通过DSS 发送至工作流或者发送至文件夹。 HP Multifunction Peripheral（MFP）Digital Sending Software（DSS）4.91.00版本没有正确配置管理设备（带有设备模板）的认证设置。攻击者可以借助预设的请求认证操作访问这些设备。

AI Predicted 7.5 Difficulty: Moderate EPSS 0.58% · P45
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2011-0279

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
HP Multifunction Peripheral (MFP) Digital Sending Software (DSS) 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
HP MFP Digital Sending Software管理设备安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HP MFP Digital Sending Software是一款数字传送软件，可将文件进行OCR 识别后通过DSS 发送至工作流或者发送至文件夹。 HP Multifunction Peripheral（MFP）Digital Sending Software（DSS）4.91.00版本没有正确配置管理设备（带有设备模板）的认证设置。攻击者可以借助预设的请求认证操作访问这些设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2011-0279

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0279

请登录查看更多情报信息。

Vendor Advisories for CVE-2011-0279 (5)

Other References for CVE-2011-0279 (1)

Same Patch Batch · n/a · 2011-03-07 · 7 CVEs total

CVE-2009-3028 Symantec Altiris eXpress NS SC Download ActiveX控件任意文件下载漏洞
CVE-2011-0064 Mozilla HarfBuzz hb-buffer.c hb_buffer_ensure函数拒绝服务漏洞
CVE-2011-0434 Gplhost Domain Technologie Control多个SQL注入漏洞
CVE-2011-0435 Gplhost Domain Technologie Control潜在敏感带宽信息泄露漏洞
CVE-2011-0436 Gplhost Domain Technologie Control client/new_account_form.php register_user函数敏感信息泄露漏洞
CVE-2011-0437 Gplhost Domain Technologie Control SSH账户管理实现shared/inc/sql/ssh.php任意账户删除漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-0279

No comments yet

Leave a comment