CVE-2018-15748

On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.15(2335dn MFP) 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of the Email Settings webpage. In some cases, authentication can be achieved with the blank default password for the admin account. NOTE: the vendor indicates that this is an "End Of Support Life" product.

• CWE-521

• https://www.gerrenmurphy.com/dell-2335dn-password-disclosure/Exploit, Third Party Advisory
• https://www.gerrenmurphy.com/dell-2335dn-password-disclosure/Exploit, Third Party Advisory

Published

Aug 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15737An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15738An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15740Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workf…6.1
• CVE-2018-15745Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated…
• CVE-2018-15746qemu-seccomp.c in QEMU might allow local OS guest users to c…5.5
• CVE-2018-15747The default configuration of glot-www through 2018-05-19 all…
• CVE-2018-15749The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R…
• CVE-2018-15750Directory Traversal vulnerability in salt-api in SaltStack S…
• CVE-2018-15751SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 …
• CVE-2018-15752An issue was discovered in the MensaMax (aka com.breustedt.m…
• CVE-2018-15753An issue was discovered in the MensaMax (aka com.breustedt.m…
• CVE-2018-15754Cloud Foundry UAA, versions 60 prior to 66.0, contain an aut…4.2