----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
OKI C5510MFP Configuration Interface Security Issues

SECUNIA ADVISORY ID:
SA28553

VERIFY ADVISORY:
http://secunia.com/advisories/28553/

CRITICAL:
Less critical

IMPACT:
Security Bypass, Exposure of sensitive information

WHERE:
>From local network

OPERATING SYSTEM:
OKI C5550MFP
http://secunia.com/product/17253/

DESCRIPTION:
Compass Security AG has reported two security issues in OKI C5510MFP,
which can be exploited by malicious people to disclose sensitive
information and to bypass certain security restrictions.

1) A security issue is caused due to the configuration of the printer
being sent in clear text when connecting to TCP ports 5548 or 7777.
This can be exploited to obtain the administration password by
connecting to the affected ports.

2) The problem is that the password can be reset without
authentication. This can be exploited to gain access to the
configuration interface.

The security issues are reported in OKI C5510MFP (Printer CU Version:
H2.15 / Printer PU Version: 01.03.01 / System F/W Version: 1.01 / Web
Page Version: 1.00). Other versions may also be affected.

SOLUTION:
Restrict network access to trusted users only.

PROVIDED AND/OR DISCOVERED BY:
Compass Security AG

ORIGINAL ADVISORY:
http://www.csnc.ch/en/modules/news/news_0004.html_1394092626.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------