ID CVE-2010-1558
Summary Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature, and obtain sensitive information, via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.00:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.00:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.02:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.02:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.03:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.03:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.04:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.04:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.05:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.05:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.06:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.06:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.07:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.07:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.08:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.08:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.09:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.09:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.10:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.11:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.11:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.12:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.12:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.13:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.13:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.14:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.14:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.15:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.15:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.16:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.16:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.17:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:4.17:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:*:*:*:*:*:*:*:*
    cpe:2.3:a:hp:multifunction_peripheral_digital_sending_software:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
CVSS
Base: 4.7 (as of 17-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE NONE NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:C/I:N/A:N
refmap via4
bid 40147
hp
  • HPSBPI02532
  • SSRT100111
osvdb 64661
xf hp-mfp-sendtoemail-unauth-access(58618)
Last major update 17-08-2017 - 01:32
Published 14-05-2010 - 19:30
Last modified 17-08-2017 - 01:32
Back to Top