CVE-2017-14386
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are affected by a cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code in the user's browser session in the context of the affected website.
La interfaz de usuario web de las impresoras láser multifunción Dell 2335dn y 2355dn, con versiones de firmware anteriores a la V2.70.06.26 A13 y a la V2.70.45.34 A10 respectivamente, se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS). Los atacantes podrían explotar esta vulnerabilidad para ejecutar HTML o código JavaScript arbitrarios en la sesión del buscador del usuario, en el contexto de la página web afectada.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-09-12 CVE Reserved
- 2017-12-07 CVE Published
- 2023-10-17 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=782W3 | 2017-12-27 | |
http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=CG55V | 2017-12-27 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | 2355dn Firmware Search vendor "Dell" for product "2355dn Firmware" | < 2.70.45.34_a10 Search vendor "Dell" for product "2355dn Firmware" and version " < 2.70.45.34_a10" | - |
Affected
| in | Dell Search vendor "Dell" | 2355dn Search vendor "Dell" for product "2355dn" | - | - |
Safe
|
Dell Search vendor "Dell" | 2335dn Firmware Search vendor "Dell" for product "2335dn Firmware" | < 2.70.06.26_a13 Search vendor "Dell" for product "2335dn Firmware" and version " < 2.70.06.26_a13" | - |
Affected
| in | Dell Search vendor "Dell" | 2335dn Search vendor "Dell" for product "2335dn" | - | - |
Safe
|