Xerox Phaser 3320 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Xerox Phaser 3320 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-13172 — CVSS 9.8 (critical): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie…
• CVE-2019-13169 — CVSS 9.8 (critical): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP…
• CVE-2019-13171 — CVSS 9.8 (critical): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in…
• CVE-2019-13165 — CVSS 9.8 (critical): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the…
• CVE-2019-13168 — CVSS 9.8 (critical): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of…
• CVE-2019-13166 — CVSS 7.5 (high): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted…
• CVE-2019-13170 — CVSS 6.5 (medium): Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation…
• CVE-2019-13167 — CVSS 6.1 (medium): Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers…