Description
The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and observing the output.
Scores
CVSS v3
6.1
EPSS
0.0005
EPSS Percentile
14.9%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-250
Status
published
Products (1)
Image Access GmbH/Scan2Net
< 7.42
Published
Dec 11, 2024
Tracked Since
Feb 18, 2026