PT-2008-4183 · Xerox · Xerox 4590+2

Published 2008-06-17 · Updated 2017-08-08 · CVE-2008-2743

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xerox 4110, 4590, and 4595 Copier/Printers (affected versions not specified)

Description A cross-site scripting (XSS) issue exists in the embedded web server, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized access or control of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-2743

Affected Products

Xerox 4110

Xerox 4590

Xerox 4595

References · 7

• http://secunia.com/advisories/30639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2743 · Security Note
• http://securityfocus.com/bid/29690 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43058 · Note
• http://vupen.com/english/advisories/2008/1829/references · Note
• http://xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf · Note
• http://securitytracker.com/id?1020282 · Note