Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2017-9632

Quick assessment

Affected
n/a PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PDQ Manufacturing LaserWash G5等都是美国PDQ Manufacturing公司的汽车自动清洗设备。 多款PDQ产品中存在安全漏洞，该漏洞源于程序没有以安全的方式传递用户名和密码。攻击者可利用该漏洞获取系统的访问权限，发布命令，影响系统的正常运行。以下产品和版本受到影响：LaserWash G5和G5 S Series；LaserWash M5；LaserWash 360和360 Plus；LaserWash AutoXpress和AutoExpress Plus；LaserJ

AI Predicted 5.9 Difficulty: Easy EPSS 0.47% · P40

Possible ATT&CK Techniques 1 AI

T1105.001
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-9632

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据加密缺失
Source: CVE Program / CVE List V5
Vulnerability Title
多款PDQ产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PDQ Manufacturing LaserWash G5等都是美国PDQ Manufacturing公司的汽车自动清洗设备。 多款PDQ产品中存在安全漏洞，该漏洞源于程序没有以安全的方式传递用户名和密码。攻击者可利用该漏洞获取系统的访问权限，发布命令，影响系统的正常运行。以下产品和版本受到影响：LaserWash G5和G5 S Series；LaserWash M5；LaserWash 360和360 Plus；LaserWash AutoXpress和AutoExpress Plus；LaserJ
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch -

II. Public POCs for CVE-2017-9632

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-9632

请登录查看更多情报信息。

Other References for CVE-2017-9632 (1)

Same Patch Batch · n/a · 2017-08-07 · 117 CVEs total

CVE-2017-12654 ImageMagick 缓冲区错误漏洞
CVE-2015-7704 NTP 安全漏洞
CVE-2015-7702 NTP 拒绝服务漏洞
CVE-2015-7701 NTP 拒绝服务漏洞
CVE-2015-7692 NTP 拒绝服务漏洞
CVE-2015-7691 NTP 拒绝服务漏洞
CVE-2015-7571 Yeager 任意文件上传漏洞
CVE-2015-5946 SugarCRM 安全漏洞
CVE-2015-5244 mod_nss 安全绕过漏洞
CVE-2014-9831 ImageMagick 安全漏洞
CVE-2014-9830 ImageMagick 安全漏洞
CVE-2014-9828 ImageMagick 安全漏洞
CVE-2014-9827 ImageMagick 安全漏洞
CVE-2014-3462 EncFS 信息泄露漏洞
CVE-2014-1235 Graphviz‘yyerror()’函数基于栈的缓冲区溢出漏洞
CVE-2014-9262 Wordpress Duplicator 安全漏洞
CVE-2015-3839 Android 安全漏洞
CVE-2015-1555 Zend Framework 安全漏洞
CVE-2015-1378 Debian 安全漏洞
CVE-2015-7561 Red Hat OpenShift3 Kubernetes 安全漏洞

Showing top 20 of 117 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch
Same vendor: n/a
Same weakness: CWE-311