CVE-2019-13171
Last modified
CVE-2019-13171 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly.. EPSS estimates a 2.81% chance of exploitation in the next 30 days.
Description
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Phaser 3320 Firmware | v53.006.16.000 |
References
- https://security.business.xerox.com/Vendor Advisory
- https://security.business.xerox.com/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-13171?
How severe is CVE-2019-13171?
How do I fix CVE-2019-13171?
Are you affected by CVE-2019-13171?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST