CVE-2017-14386
Quick assessment
Affected
n/a Dell 2335dn Firmware and Dell 2355DN Firmware Version V2.70.45.34, A10 and Version V2.70.06.26, A13
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell 2335dn和2355dn Multifunction Laser Printers都是美国戴尔（Dell）公司的多功能激光打印机产品。 使用V2.70.06.26 A13和V2.70.45.34 A10版本固件的Dell 2335dn和2355dn Multifunction Laser Printers中的Web用户界面存在跨站脚本漏洞。远程攻击者可利用该漏洞在用户的浏览器会话中执行任意的HTML或JavaScript代码。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-14386
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Dell 2335dn和2355dn Multifunction Laser Printers 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell 2335dn和2355dn Multifunction Laser Printers都是美国戴尔（Dell）公司的多功能激光打印机产品。 使用V2.70.06.26 A13和V2.70.45.34 A10版本固件的Dell 2335dn和2355dn Multifunction Laser Printers中的Web用户界面存在跨站脚本漏洞。远程攻击者可利用该漏洞在用户的浏览器会话中执行任意的HTML或JavaScript代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Dell 2335dn Firmware and Dell 2355DN Firmware Version V2.70.45.34, A10 and Version V2.70.06.26, A13 | Dell 2335dn Firmware and Dell 2355DN Firmware Version V2.70.45.34, A10 and Version V2.70.06.26, A13 | - |
|
II. Public POCs for CVE-2017-14386
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-14386
请登录查看更多情报信息。
Other References for CVE-2017-14386 (2)
-
http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3 x_refsource_CONFIRM
-
http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V x_refsource_CONFIRM
Same Patch Batch · n/a · 2017-12-07 · 12 CVEs total
| CVE-2017-17435 | Vaultek Gun Safe VT20i 安全漏洞 | |
| CVE-2017-17436 | Vaultek Gun Safe VT20i 安全漏洞 | |
| CVE-2017-17448 | Linux kernel 安全漏洞 | |
| CVE-2017-17449 | Linux kernel 安全漏洞 | |
| CVE-2017-17450 | Linux kernel 安全漏洞 | |
| CVE-2017-17451 | WordPress WP Mailster插件跨站脚本漏洞 | |
| CVE-2017-17384 | ISPConfig 安全漏洞 | |
| CVE-2017-17430 | Sangoma NetBorder/Vega Session Controller 安全漏洞 | |
| CVE-2017-17458 | Mercurial 安全漏洞 | |
| CVE-2017-17459 | Fossil 安全漏洞 | |
| CVE-2017-1000410 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-14386
No comments yet