CVE Feed

    Dashboard / CVE / CVE-2013-2507

    CVE-2013-2507

    Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671.

    Published:Mar 14, 2014
    Last Modified:Apr 12, 2025
    EPS:Mar 14, 2014
    EPSS Score:0.00421
    CVSS Score:4.3

    Affected Products

    Vendor
    Brother
    Product
    Mfc-9970cdw
    Vendor
    Brother
    Product
    Mfc-9970cdw Firmware

    Exploits

    http://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.htmlhttp://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.htmlhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.htmlhttp://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.htmlhttp://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.htmlhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html

    Related CVEs

    CVE-2013-2675 (CVSS 6.5) — Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability whi…
    CVE-2013-2676 (CVSS 7.5) — Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remot…
    CVE-2013-2674 (CVSS 7.5) — Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remot…
    CVE-2013-2673 (CVSS 6.8) — Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically pr…
    CVE-2013-2672 (CVSS 7.5) — Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.…
    CVE-2013-2671 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) …
    CVE-2013-2670 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High