Vulnerability Details CVE-2015-6520
IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.openwall.com/lists/oss-security/2015/08/11/1
- http://www.openwall.com/lists/oss-security/2015/08/18/11
- http://www.ubuntu.com/usn/USN-2725-1
- https://bugs.launchpad.net/ubuntu/+source/ippusbxd/+bug/1455644
- https://github.com/tillkamppeter/ippusbxd/commit/46844402bca7a38fc224483ba6f0a93c4613203f
- http://www.openwall.com/lists/oss-security/2015/08/11/1
- http://www.openwall.com/lists/oss-security/2015/08/18/11
- http://www.ubuntu.com/usn/USN-2725-1
- https://bugs.launchpad.net/ubuntu/+source/ippusbxd/+bug/1455644
- https://github.com/tillkamppeter/ippusbxd/commit/46844402bca7a38fc224483ba6f0a93c4613203f
Products affected by CVE-2015-6520
-
cpe:2.3:a:ippusbxd_project:ippusbxd:1.21.2