Design/Logic Flaw

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

Buffer overflow

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device...

CVE-2019-13194

Some Brother printers such as the HL-L8360CDW v1.20 were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL...

CVE-2019-13192

CVE-2019-13192 affects Brother printers (e.g., HL-L8360CDW v1.20). The IPP service fails to parse some attribute names, causing a heap/buffer overflow that could allow remote code execution on the device. Documented impact is device compromise with arbitrary code execution; exploitation details a...

CVE-2019-13192

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...

CVE-2019-13193

CVE-2019-13193 affects Brother HL‑8360CDW v1.20 and similar Brother printers, where the web server fails to parse cookie values, causing a stack-based buffer overflow that could allow arbitrary code execution over the network. The initial docs indicate exploitation status is not provided; remedia...

CVE-2019-13193

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device...

CVE-2019-13194

Some Brother printers such as the HL-L8360CDW v1.20 were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL...

CVE-2019-13194

Affected product: Brother HL-L8360CDW (v1.20) and related models. Root cause: information disclosure vulnerability allowing an unauthenticated user to obtain sensitive data via a specific URL. Impact: exposure of sensitive information over network; no exploit details provided in the documents. Mi...

CVE-2019-13165

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

CVE-2019-13165

The CVE-2019-13165 entry refers to a buffer overflow in the IPP service request parser affecting Xerox printers (e.g., Phaser 3320 with version V53.006.16.000). The underlying flaw allows an unauthenticated attacker to trigger a Denial of Service and potentially execute arbitrary code on the devi...

CVE-2019-13166

CVE-2019-13166 affects Xerox printers (example: Phaser 3320 with V53.006.16.000). The root issue is lack of account lockout, enabling brute-force attempts to extract local credentials from the device. Public sources in connected documents confirm this vulnerability scenario and affected class, bu...

CVE-2019-13168

The CVE-2019-13168 entry describes a buffer overflow in the IPP service attributes parser on Xerox printers (e.g., Phaser 3320). An unauthenticated attacker could trigger a Denial of Service and potentially execute arbitrary code on affected devices. The advisory context comes from multiple sourc...

CVE-2019-13169

CVE-2019-13169 affects some Xerox printers (e.g., Phaser 3320) due to a buffer overflow in the Content-Type HTTP Header of the device’s web application. The underlying cause is improper handling of Content-Type header data, enabling an attacker to potentially execute arbitrary code on the device....

CVE-2019-13170

CVE-2019-13170 affects Xerox printers (notably Phaser 3320 with firmware version V53.006.16.000) where CSRF protection was not implemented. The root cause is absence of CSRF defenses, enabling an attacker to exploit requests and potentially take over a local device account. Public documents confi...

CVE-2019-13171

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handlin...

CVE-2019-13171

CVE-2019-13171 affects some Xerox printers (e.g., Phaser 3320) due to stack-based buffer overflows in the Google Cloud Print implementation. The root cause is insecure handling of the register parameters and an unchecked memcpy() size, which can allow an unauthenticated attacker to execute arbitr...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13204

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by multiple buffer overflow vulnerabilities in the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS, and potentially execute arbitrary code on the device...