VULHUB ™

WorkCentre is reported prone to an information disclosure vulnerability. This issue may allow an attacker to gain access to confidential print data. It is reported that this issue arises in the ESS/Network Controller code. Reportedly, an attacker can cause the Immediate Image Overwrite security feature to fail, allowing confidential print data to be retrieved at a later time. The issue is reported to occur as the result of an unexpected power loss. It is conjectured that this vulnerability is remote in nature and allows an attacker to access print data through the Web interface of the printer. The attacker may be able to access the print queue through the Web interface followed by printing potentially sensitive documents. WorkCentre + PS M35/M45/M55, WorkCentre Pro 35/45/55 versions 1.01.108.1 to 1.02.370.1, and WorkCentre 32/40 Color versions 01.00.060 to 01.02.070.1 are affected.

WorkCentre is reported prone to an information disclosure vulnerability. This issue may allow an attacker to gain access to confidential print data. It is reported that this issue arises in the ESS/Network Controller code. Reportedly, an attacker can cause the Immediate Image Overwrite security feature to fail, allowing confidential print data to be retrieved at a later time. The issue is reported to occur as the result of an unexpected power loss. It is conjectured that this vulnerability is remote in nature and allows an attacker to access print data through the Web interface of the printer. The attacker may be able to access the print queue through the Web interface followed by printing potentially sensitive documents. WorkCentre + PS M35/M45/M55, WorkCentre Pro 35/45/55 versions 1.01.108.1 to 1.02.370.1, and WorkCentre 32/40 Color versions 01.00.060 to 01.02.070.1 are affected.