Xerox Phaser 3320 Firmware vulnerabilities

8 CVEs affecting Xerox Phaser 3320 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-13172, published 2020-03-13.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-13172, published 2020-03-13. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to…
• CVE-2019-13171, published 2020-03-13. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an…
• CVE-2019-13168, published 2020-03-13. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker…
• CVE-2019-13165, published 2020-03-13. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to…
• CVE-2019-13169, published 2020-03-13. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to…
• CVE-2019-13166, published 2020-03-13. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks.
• CVE-2019-13167, published 2020-03-13. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to…
• CVE-2019-13170, published 2020-03-13. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local…