JVNDB-2006-000736

NEC MultiWriter 1700C web server authentication bypass vulnerability

Certain NEC printers have build-in web servers. They contain a vulnerability, where unauthorized users could change the system configuration.

Base Metrics: 3.3 (Low) [IPA Score]

• Access Vector: Adjacent Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

NEC Corporation

• NEC MultiWriter 1700C (model number: PR-L1700C)
• Network Expansion Card PR-L1700C-MC

A remote attacker could change the system configuration of the printer's built-in web server.

NEC Corporation

• NEC Security Information : NV06-006 (Japanese)

1. CVE-2006-6946

1. JVN : JVN#63999575
2. National Vulnerability Database (NVD) : CVE-2006-6946

[2008/05/21]
  Web page published