CVE-2017-14386
Last modified
CVE-2017-14386 is a vulnerability of currently unknown severity. The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.. EPSS estimates a 0.64% chance of exploitation in the next 30 days.
Description
The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | 2355dn Firmware | < 2.70.45.34_a10 |
| Dell | 2335dn Firmware | < 2.70.06.26_a13 |
References
- http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3Patch, Vendor Advisory
- http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55VPatch, Vendor Advisory
- http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3Patch, Vendor Advisory
- http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55VPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-14386?
How severe is CVE-2017-14386?
How do I fix CVE-2017-14386?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-14380In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.…
- CVE-2017-14381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-14382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for…
- CVE-2017-14384In Dell Storage Manager versions earlier than 16.3.20, the E…
- CVE-2017-14385An issue was discovered in EMC Data Domain DD OS 5.7 family,…
- CVE-2017-14387The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1…
- CVE-2017-14388Cloud Foundry Foundation GrootFS release 0.3.x versions prio…
- CVE-2017-14389An issue was discovered in Cloud Foundry Foundation capi-rel…6.5
- CVE-2017-1439IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.…
- CVE-2017-14390In Cloud Foundry Foundation cf-deployment v0.35.0, a misconf…
- CVE-2017-14391Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2017-14386?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
