CVE-2013-2673 - Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows phy

CVE-2013-2673

Summary

Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access.

References

http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html
https://www.securityfocus.com/bid/59727

Vulnerable Configurations

cpe:2.3:o:brother:mfc-9970cdw_firmware:1.10:*:*:*:*:*:*:*
cpe:2.3:o:brother:mfc-9970cdw_firmware:1.10:*:*:*:*:*:*:*
cpe:2.3:h:brother:mfc-9970cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:brother:mfc-9970cdw:-:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 05-02-2020 - 21:13)
Impact:
Exploitability:

CWE

CWE-863

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	59727
misc	http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html

Last major update

05-02-2020 - 21:13

Published

03-02-2020 - 18:15

Last modified

05-02-2020 - 21:13