Skip to content
Fencer Intel
critical 9.8

CVE-2017-9632 json

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, a…

published 2017-08-07 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-18563

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 41%
public exploits
0
none known

Summary

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all versions, ProTouch Tandem, all versions, ProTouch ICON, all versions, and ProTouch AutoGloss, all versions. The username and password are transmitted insecurely.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-17-208-03 updated cvss 7.5

PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch

  • PDQ Manufacturing, Inc. LaserJet PDQ Manufacturing, Inc. LaserWash 360 and 360 Plus PDQ Manufacturing, Inc. LaserWash AutoXpress and AutoExpress Plus PDQ Manufacturing, Inc. LaserWash G5 and G5 S Series PDQ Manufacturing, Inc. LaserWash M5 PDQ Manufacturing, Inc. ProTouch AutoGloss
    +2 more products
    PDQ Manufacturing, Inc. ProTouch ICON PDQ Manufacturing, Inc. ProTouch Tandem
    affected: mitigation “Always make sure any PDQ equipment is not accessible from the Internet; it should be behind a secure firewall.”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.47% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch

Classification

Weakness
  • CWE-311 Missing Encryption of Sensitive Data

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.