Description
A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pantum | BP5100DW | 3.A.4.7 | — |
References
- VDB-432924 | Pantum BP5100DW Web omDB.shtml missing authentication vdb-entry
- VDB-432924 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-124578 | CVE Analysis and Report third-party-advisory
- Submit #1038185 | Zhuhai Pantum Electronics BP5100DW printer Firmware 3.A.4.7 Unauthenticated disclosure of device configuration and credentials via /shtml/omDB.shtml third-party-advisory