Vulnerability Description
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Phaser 3320 Firmware | v53.006.16.000 |
| Xerox | Phaser 3320 | - |
Related Weaknesses (CWE)
References
- https://security.business.xerox.com/Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiThird Party Advisory
- https://security.business.xerox.com/Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiThird Party Advisory
FAQ
What is CVE-2019-13171?
CVE-2019-13171 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unaut...
How severe is CVE-2019-13171?
CVE-2019-13171 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-13171?
Check the references section above for vendor advisories and patch information. Affected products include: Xerox Phaser 3320 Firmware, Xerox Phaser 3320.