HP MFP Digital Sending Software < 4.18.3 Local Unspecified Authentication Bypass
Medium Nessus Plugin ID 46676
SynopsisThe remote Windows host contains an application that is affected by an authentication bypass vulnerability.
DescriptionThe remote Windows host contains a version of HP MFP Digital Sending Software earlier than 4.18.3. Such versions are potentially affected by an unspecified authentication bypass vulnerability.
A local attacker, exploiting this flaw, reportedly can gain unauthorized access to 'Send to email' and other functionalities of an HP Multifunction Peripheral (MFP) that is controlled by the HP Digital Sending Software.
SolutionUpgrade to HP MFP Digital Sending Software 4.18.5 or later.
Note that HP initially recommended upgrading to version 4.18.3. While that version does address the vulnerability, it also introduces a non-security defect and HP now recommends upgrading to version 4.18.5.