high7.5
CVE-2019-13166
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout.
Impact
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerox | Phaser 3320 Firmware | Version v53.006.16.000 |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.business.xerox.com/
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
- https://security.business.xerox.com/
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/