CVE-2013-2670: XSS
Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERYSTRING) to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2670?
The severity of CVE-2013-2670 is classified as medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-2670?
To fix CVE-2013-2670, update the Brother MFC-9970CDW printer firmware to a version that does not have this vulnerability.
Which devices are affected by CVE-2013-2670?
CVE-2013-2670 affects the Brother MFC-9970CDW printer with firmware versions G (1.03) and L (1.10).
What type of vulnerability is CVE-2013-2670?
CVE-2013-2670 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2013-2670 be exploited remotely?
Yes, CVE-2013-2670 can be exploited remotely by injecting arbitrary web script or HTML via specific parameters.