CVE-2024-3496CWE-288

Authentication Bypass Vulnerability

High · published June 14, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2024-06-14T04:13Z
EPSS history
Timeline
  • 14 JUN 04:13Z
    Authentication Bypass Vulnerability
    cvelistv5