What is CVE-2019-13167?

CVE-2019-13167 is a medium-severity vulnerability in Xerox Phaser 3320, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-03-13.

How severe is CVE-2019-13167?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Xerox Phaser 3320

CVE-2019-13167

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (59.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Xerox Phaser_3320
Xerox Phaser_3320_firmware — versions v53.006.16.000
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-13167?: CVE-2019-13167 is a medium-severity vulnerability in Xerox Phaser 3320, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-03-13.
How severe is CVE-2019-13167?: Medium severity. CVSS v3 base score is 6.1 out of 10.