CVE-2023-0857CWE-286

Unintentional change of settings during initial registration of system administrators which uses control protocols

Medium · published May 11, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
48.5
In the wild
Unconfirmed
What it is

Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00610 · 48.5th percentile
Weakness
CWE-286 · Incorrect User Management
Published
2023-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Unintentional change of settings during initial registration of system administrators which uses control protocols
    cvelistv5