CVE-2017-9632
Estado: ModificadaCrítica (9.8)—
A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.47%
- Percentil entre todas las CVEs puntuadas: 39
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
Pdqinc — Laserjet FirmwarePdqinc — Laserwash 360 FirmwarePdqinc — Laserwash 360 Plus FirmwarePdqinc — Laserwash Autoxpress FirmwarePdqinc — Laserwash Autoxpress Plus FirmwarePdqinc — Laserwash G5 FirmwarePdqinc — Laserwash G5 S FirmwarePdqinc — Laserwash M5 FirmwarePdqinc — Protouch Autogloss FirmwarePdqinc — Protouch Icon FirmwarePdqinc — Protouch Tandem Firmware
CWE
- CWE-311
- CWE-311
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-9632",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "n/a",
"product": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch",
"versions": [
{
"status": "affected",
"version": "PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch"
}
]
}
]
}
],
"published": "2017-08-07T08:29:00.400",
"references": [
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-311"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-311"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely."
},
{
"lang": "es",
"value": "Se ha descubierto un error de falta de cifrado de datos confidenciales en PDQ Manufacturing LaserWash G5 y G5 S Series en todas las versiones; LaserWash M5, todas las versiones; LaserWash 360 y 360 Plus, todas las versiones; LaserWash AutoXpress y AutoExpress Plus, todas las versiones; LaserJet, todas las versiones; ProTouch Tandem, todas las versiones; ProTouch ICON, todas las versiones; y ProTouch AutoGloss, todas las versiones. El usuario y la contraseña se transmiten de forma no segura."
}
],
"lastModified": "2026-06-17T01:28:37.317",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_g5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5214117-D2A6-4CBE-92AB-1C10FFF53960"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_g5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "478D29EF-F2EB-4FC2-8021-64A98DCFC278"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_g5_s_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8345743-9E9B-4B22-950F-B8D16B2DD389"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_g5_s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9418A71C-C776-42D1-8C49-8E7A5A35510F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_m5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "526E3009-4341-4510-87EF-6579B2016EA6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_m5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "556B3850-9721-4338-BAE8-0E6827EE967F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_360_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF481571-EA78-4915-9B56-6E20B423CA5B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_360:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BA3E7B3B-0A5A-4643-949B-ECA1771A67EF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_360_plus_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "215A6BA3-1AE7-4452-9F09-1D47D46314F3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_360_plus:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A3FC978B-25DE-4BFC-8B35-349CB0C49059"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_autoxpress_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4D824F5-77FA-4664-A37C-AC5810102262"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_autoxpress:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0E1E23A-1A79-4863-9981-DF0E1AA971A0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserwash_autoxpress_plus_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E34E8DC-2ADE-4100-BC53-C8E632C57BE2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserwash_autoxpress_plus:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5AEF583E-6F5B-42E4-B3D1-536E9497BDC2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:laserjet_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FD3B5D6-773B-40BC-AFB4-39877E300D78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:laserjet:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53FAAE69-1553-4C1D-B447-FDA4AE980417"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_tandem_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4030F5FE-0CE3-4604-A4A4-F88E219CA466"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_tandem:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AC802696-788D-48C2-B4E4-37DC0D733BEE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_icon_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C00C452-C834-4E78-8CEF-92C4B69FB0E3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_icon:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FA832AF8-2250-4EF8-85DF-C6DA40CC471D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pdqinc:protouch_autogloss_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C57FFA51-B5B4-4817-9047-B7F3A74CCA31"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pdqinc:protouch_autogloss:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC6A40A9-F759-4D9F-9237-1C4BACE79D07"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}