CVE-2017-9630
Estado: ModificadaCrítica (9.4)—
An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
- Puntuación base: 9.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.19%
- Percentil entre todas las CVEs puntuadas: 67
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
Pdqinc — Laserjet FirmwarePdqinc — Laserwash 360 FirmwarePdqinc — Laserwash 360 Plus FirmwarePdqinc — Laserwash Autoxpress FirmwarePdqinc — Laserwash Autoxpress Plus FirmwarePdqinc — Laserwash G5 FirmwarePdqinc — Laserwash G5 S FirmwarePdqinc — Laserwash M5 FirmwarePdqinc — Protouch Autogloss FirmwarePdqinc — Protouch Icon FirmwarePdqinc — Protouch Tandem Firmware
CWE
- CWE-287
- CWE-287
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-9630",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.4,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 5.5,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "n/a",
"product": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch",
"versions": [
{
"status": "affected",
"version": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch"
}
]
}
]
}
],
"published": "2017-08-07T08:29:00.370",
"references": [
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct."
},
{
"lang": "es",
"value": "Se ha descubierto un error de autenticación incorrecta en PDQ Manufacturing LaserWash G5 y G5 S Series en todas las versiones; LaserWash M5, todas las versiones; LaserWash 360 y 360 Plus, todas las versiones; LaserWash AutoXpress y AutoExpress Plus, todas las versiones; LaserJet, todas las versiones; ProTouch Tandem, todas las versiones; ProTouch ICON, todas las versiones; y ProTouch AutoGloss, todas las versiones. El servidor web no verifica adecuadamente que la información de autenticación proporcionada sea correcta."
}
],
"lastModified": "2026-06-17T01:28:37.033",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_g5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5214117-D2A6-4CBE-92AB-1C10FFF53960"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_g5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "478D29EF-F2EB-4FC2-8021-64A98DCFC278"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_g5_s_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8345743-9E9B-4B22-950F-B8D16B2DD389"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_g5_s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9418A71C-C776-42D1-8C49-8E7A5A35510F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_m5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526E3009-4341-4510-87EF-6579B2016EA6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_m5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "556B3850-9721-4338-BAE8-0E6827EE967F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_360_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF481571-EA78-4915-9B56-6E20B423CA5B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_360:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BA3E7B3B-0A5A-4643-949B-ECA1771A67EF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_360_plus_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "215A6BA3-1AE7-4452-9F09-1D47D46314F3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_360_plus:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A3FC978B-25DE-4BFC-8B35-349CB0C49059"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_autoxpress_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4D824F5-77FA-4664-A37C-AC5810102262"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_autoxpress:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0E1E23A-1A79-4863-9981-DF0E1AA971A0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_autoxpress_plus_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E34E8DC-2ADE-4100-BC53-C8E632C57BE2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_autoxpress_plus:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5AEF583E-6F5B-42E4-B3D1-536E9497BDC2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserjet_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FD3B5D6-773B-40BC-AFB4-39877E300D78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserjet:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53FAAE69-1553-4C1D-B447-FDA4AE980417"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_tandem_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4030F5FE-0CE3-4604-A4A4-F88E219CA466"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_tandem:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AC802696-788D-48C2-B4E4-37DC0D733BEE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_icon_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C00C452-C834-4E78-8CEF-92C4B69FB0E3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_icon:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA832AF8-2250-4EF8-85DF-C6DA40CC471D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_autogloss_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C57FFA51-B5B4-4817-9047-B7F3A74CCA31"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_autogloss:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC6A40A9-F759-4D9F-9237-1C4BACE79D07"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}