CVE-2013-2674

Опубликовано: 03 фев. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers.

Ссылки

http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/84091
Third Party Advisory
VDB Entry
https://www.securityfocus.com/bid/59725
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/84091
Third Party Advisory
VDB Entry
https://www.securityfocus.com/bid/59725
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:brother:mfc-9970cdw_firmware:1.10:*:*:*:*:*:*:*

cpe:2.3:h:brother:mfc-9970cdw:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02311

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-4m9p-c36q-62gp

github

почти 4 года назад