CVE-2017-9630

Published: Aug 7, 2017Modified: May 13, 2026

9.4

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Exploitability: 3.9 / Impact: 5.5

Source: NVD

Description

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The web server does not properly verify that provided authentication information is correct.

Affected (11)

Products: Pdqinc: Laserwash G5 Firmware, Laserwash G5 S Firmware, Laserwash M5 Firmware, Laserwash 360 Firmware, Laserwash 360 Plus Firmware, Laserwash Autoxpress Firmware, Laserwash Autoxpress Plus Firmware, Laserjet Firmware, Protouch Tandem Firmware, Protouch Icon Firmware, Protouch Autogloss Firmware

Pdqinc

11 products

Laserwash G5 Firmware

Laserwash G5 S Firmware

Laserwash M5 Firmware

Laserwash 360 Firmware

Laserwash 360 Plus Firmware

Laserwash Autoxpress Firmware

Laserwash Autoxpress Plus Firmware

Laserjet Firmware

Protouch Tandem Firmware

Protouch Icon Firmware

Protouch Autogloss Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash G5 Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash G5	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash G5 S Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash G5 S	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash M5 Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash M5	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash 360 Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash 360	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash 360 Plus Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash 360 Plus	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash Autoxpress Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash Autoxpress	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserwash Autoxpress Plus Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserwash Autoxpress Plus	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Laserjet Firmware	All versions

Running on/with	Platform Versions
Pdqinc Laserjet	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Protouch Tandem Firmware	All versions

Running on/with	Platform Versions
Pdqinc Protouch Tandem	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Protouch Icon Firmware	All versions

Running on/with	Platform Versions
Pdqinc Protouch Icon	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pdqinc Protouch Autogloss Firmware	All versions

Running on/with	Platform Versions
Pdqinc Protouch Autogloss	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-17-208-03

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.