Description
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://security.business.xerox.com/
Third Party Advisory x_refsource_misc
https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-xerox-printers/
Scores
CVSS v3
9.8
EPSS
0.0153
EPSS Percentile
81.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (1)
xerox/phaser_3320_firmware
v53.006.16.000
Published
Mar 13, 2020
Tracked Since
Feb 18, 2026