CVE-2017-13771

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.

• CWE-522

• http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Aug/46Exploit, Mailing List, Third Party Advisory
• https://support.lexmark.com/alerts
• http://packetstormsecurity.com/files/143975/Lexmark-Scan-To-Network-SNF-3.2.9-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Aug/46Exploit, Mailing List, Third Party Advisory
• https://support.lexmark.com/alerts

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13765In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the…
• CVE-2017-13766In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O diss…
• CVE-2017-13767In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the…
• CVE-2017-13768Null Pointer Dereference in the IdentifyImage function in Ma…6.5
• CVE-2017-13769The WriteTHUMBNAILImage function in coders/thumbnail.c in Im…6.5
• CVE-2017-1377IBM Runbook Automation reveals sensitive information in erro…
• CVE-2017-13772Multiple stack-based buffer overflows in TP-Link WR940N WiFi…
• CVE-2017-13774Hikvision iVMS-4200 devices before v2.6.2.7 allow local user…
• CVE-2017-13775GraphicsMagick 1.3.26 has a denial of service issue in ReadJ…
• CVE-2017-13776GraphicsMagick 1.3.26 has a denial of service issue in ReadX…
• CVE-2017-13777GraphicsMagick 1.3.26 has a denial of service issue in ReadX…
• CVE-2017-13778Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.p…