medium4.8Public exploit code
CVE-2018-11581
Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Brother HL Series Printers 1.15 - Cross-Site Scripting2018-06-04 · webapps · hardware
Impact
Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brother | Hl-L2340d Firmware | before 1.16 |
| Brother | Hl-L2380dw Firmware | before 1.16 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.brother.com/g/b/faqend.aspx?c=us_ot&lang=en&prod=group2&ftype3=100033&faqid=faq00100530_000
- https://www.exploit-db.com/exploits/44839/
- https://support.brother.com/g/b/faqend.aspx?c=us_ot&lang=en&prod=group2&ftype3=100033&faqid=faq00100530_000
- https://www.exploit-db.com/exploits/44839/