Lucene search

MitreCVE-2019-13167

HistoryMar 13, 2020 - 7:15 p.m.

CVE-2019-13167

2020-03-1319:15:14

CWE-79

mitre

web.nvd.nist.gov

cve-2019-13167

stored xss

xerox

web application

vulnerability

session hijacking

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.4%

JSON

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions.

Affected configurations

Nvd

Node

xeroxphaser_3320_firmwareMatchv53.006.16.000

AND

xeroxphaser_3320Match-

VendorProductVersionCPE
xeroxphaser_3320_firmwarev53.006.16.000cpe:2.3:o:xerox:phaser_3320_firmware:v53.006.16.000:*:*:*:*:*:*:*
xeroxphaser_3320-cpe:2.3:h:xerox:phaser_3320:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xerox	phaser_3320_firmware	v53.006.16.000	cpe:2.3:o:xerox:phaser_3320_firmware:v53.006.16.000:::::::*
xerox	phaser_3320	-	cpe:2.3:h:xerox:phaser_3320:-:::::::*

References

security.business.xerox.com/

www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.4%

JSON

Related for CVE-2019-13167