CVE-2018-17312: XSS
Published Sep 26, 2018
·Updated
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Affected Software
2 affected components
Ricoh Aficio Mp 301spf Firmware
Ricoh Aficio Mp 301spf
Event History
Sep 26, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this RICOH Aficio MP 301 printer vulnerability?
The vulnerability ID for this RICOH Aficio MP 301 printer vulnerability is CVE-2018-17312.
2
What are the affected software versions of this vulnerability?
The affected software version is Ricoh Aficio Mp 301spf Firmware.
3
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium with a CVSS score of 6.1.
4
What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?
The CWE ID associated with this vulnerability is CWE-79.
5
Is there a fix available for this vulnerability?
Yes, it is recommended to update the firmware to the latest version provided by Ricoh.