Cross-Site Scripting Vulnerabilities in Brother MFC-9970CDW Printer
CVE-2013-2671

Currently unrated

Key Information:

Vendor

Brother

Vendor
CVE Published:
14 March 2014

What is CVE-2013-2671?

The Brother MFC-9970CDW printer is affected by multiple Cross-Site Scripting (XSS) vulnerabilities that allow attackers to execute arbitrary web scripts or HTML. This can be achieved through the manipulation of specific parameters in the administrative interface. Attackers can exploit this vulnerability by sending specially crafted requests targeting 'admin/admin_main.html', 'admin/profile_settings_net.html', and 'fax/general_setup.html'. This opens avenues for unauthorized actions or data exposure, thereby posing significant security risks to users.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.