CVE-2019-13167

CVE-2019-13167 involves multiple stored XSS flaws in the Xerox Web Application used by Phaser 3320 (V53.006.16.000) and other printers. The underlying issue is cross-site scripting stored in the web interface, allowing an attacker to perform actions on behalf of an administrator or trigger unwant...

CVE-2019-13165

The CVE-2019-13165 entry refers to a buffer overflow in the IPP service request parser affecting Xerox printers (e.g., Phaser 3320 with version V53.006.16.000). The underlying flaw allows an unauthenticated attacker to trigger a Denial of Service and potentially execute arbitrary code on the devi...

CVE-2019-13168

The CVE-2019-13168 entry describes a buffer overflow in the IPP service attributes parser on Xerox printers (e.g., Phaser 3320). An unauthenticated attacker could trigger a Denial of Service and potentially execute arbitrary code on affected devices. The advisory context comes from multiple sourc...

CVE-2019-13169

CVE-2019-13169 affects some Xerox printers (e.g., Phaser 3320) due to a buffer overflow in the Content-Type HTTP Header of the device’s web application. The underlying cause is improper handling of Content-Type header data, enabling an attacker to potentially execute arbitrary code on the device....

CVE-2019-13171

CVE-2019-13171 affects some Xerox printers (e.g., Phaser 3320) due to stack-based buffer overflows in the Google Cloud Print implementation. The root cause is insecure handling of the register parameters and an unchecked memcpy() size, which can allow an unauthenticated attacker to execute arbitr...

CVE-2019-13166

CVE-2019-13166 affects Xerox printers (example: Phaser 3320 with V53.006.16.000). The root issue is lack of account lockout, enabling brute-force attempts to extract local credentials from the device. Public sources in connected documents confirm this vulnerability scenario and affected class, bu...

CVE-2019-13172

CVE-2019-13172 concerns a buffer overflow vulnerability in the Authentication Cookie of the web application on some Xerox printers (e.g., Phaser 3320 with firmware 53.006.16.000). The underlying issue allows an attacker to execute arbitrary code on the device. Documents consistently describe the ...

CVE-2019-13170

CVE-2019-13170 affects Xerox printers (notably Phaser 3320 with firmware version V53.006.16.000) where CSRF protection was not implemented. The root cause is absence of CSRF defenses, enabling an attacker to exploit requests and potentially take over a local device account. Public documents confi...