Vulnerability Details CVE-2018-11692
An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
Exploit prediction scoring system (EPSS) score
EPSS Score 0.038
EPSS Ranking 87.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2018-11692
-
cpe:2.3:h:canon:lbp3370:-
-
cpe:2.3:h:canon:lbp3460:-
-
cpe:2.3:h:canon:lbp6650:-
-
cpe:2.3:h:canon:lbp7750c:-
-
cpe:2.3:o:canon:lbp3370_firmware:-
-
cpe:2.3:o:canon:lbp3460_firmware:-
-
cpe:2.3:o:canon:lbp6650_firmware:-
-
cpe:2.3:o:canon:lbp7750c_firmware:-