Cross site scripting

2023-02-0621:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

hp deskjet 2540

firmware vulnerability

http configuration

unsupported product

authenticated attacker

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

UNSUPPORTED WHEN ASSIGNED Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CPENameOperatorVersion
deskjet_2540_a9u23b_firmwareeq1fn1418br-cep

CPE	Name	Operator	Version
	deskjet_2540_a9u23b_firmware	eq	1fn1418br-cep

References

github.com/swzhouu/CVE-2022-48311