CVE-2018-17311: XSS
Published Sep 26, 2018
·Updated
On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Affected Software
2 affected components
Ricoh Mp C6503 Firmware
Ricoh MP C6503
Event History
Sep 26, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2018-17311.
2
What software is affected by this vulnerability?
The Ricoh MP C6503 Firmware is affected by this vulnerability.
3
What is the severity of CVE-2018-17311?
The severity of CVE-2018-17311 is medium with a severity value of 6.1.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
5
How can I fix the HTML Injection and Stored XSS vulnerabilities in the RICOH MP C6503 Plus printer?
To fix the HTML Injection and Stored XSS vulnerabilities, it is recommended to update the firmware of the RICOH MP C6503 Plus printer to the latest version provided by Ricoh.