Detections
Analytics
Lexmark Printer Configuration Persistent XSS
low Nessus Plugin ID 72772
Language:
Synopsis
The remote printer is potentially affected by a cross-site scripting vulnerability.Description
The version of the remote Lexmark printer is potentially affected by a cross-site scripting vulnerability. An input validation error exists related to the 'General Settings' configuration page and the 'Location' and 'Contact Name' parameters that could allow persistent cross-site scripting attacks.Solution
Upgrade to the vendor's suggested Lexmark printer firmware version or later.See Also
Plugin Details
Severity: Low
ID: 72772
File Name: lexmark_printer_TE585.nasl
Version: 1.5
Type: remote
Family: Misc.
Published: 3/3/2014
Updated: 11/26/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 2.6
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2013-6033
Vulnerability Information
CPE: cpe:/h:lexmark:c52x, cpe:/h:lexmark:c53x, cpe:/h:lexmark:c920, cpe:/h:lexmark:c935dn, cpe:/h:lexmark:e250, cpe:/h:lexmark:e350, cpe:/h:lexmark:e450, cpe:/h:lexmark:t64x, cpe:/h:lexmark:w840
Required KB Items: www/lexmark_printer/model, www/lexmark_printer/base_ver
Exploit Ease: No known exploits are available
Patch Publication Date: 1/31/2014
Vulnerability Publication Date: 1/31/2014
Reference Information
CVE: CVE-2013-6033
BID: 65277