Home

Description

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames.

PUBLISHED Reserved 2025-04-16 | Published 2025-05-26 | Updated 2025-05-27 | Assigner INCIBE




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-209 Generation of Error Message Containing Sensitive Information

Product status

Default status
unaffected

all versions
affected

Credits

David Padilla Alvarado finder

References

www.incibe.es/...iso/user-enumeration-m3m-printer-server-web

cve.org (CVE-2025-40653)

nvd.nist.gov (CVE-2025-40653)

Download JSON