CVE-2018-17310: XSS
Published Sep 26, 2018
·Updated
On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Affected Software
2 affected components
Ricoh Mp C1803 Jpn Firmware
Ricoh MP C1803 JPN
Event History
Sep 26, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-17310?
CVE-2018-17310 refers to the HTML Injection and Stored XSS vulnerabilities discovered on the RICOH MP C1803 JPN printer.
2
What is the severity of CVE-2018-17310?
The severity of CVE-2018-17310 is medium with a CVSS score of 6.1.
3
How do the HTML Injection and Stored XSS vulnerabilities affect the RICOH MP C1803 JPN printer?
The vulnerabilities allow an attacker to inject malicious HTML code and execute cross-site scripting attacks using the address entry function of the printer.
4
What is the affected software version of CVE-2018-17310?
The affected software version is the Ricoh MP C1803 JPN firmware.
5
Is the RICOH MP C1803 JPN printer vulnerable to the HTML Injection and Stored XSS vulnerabilities?
No, the RICOH MP C1803 JPN printer itself is not vulnerable, only the firmware version is affected.