Unrated severityNVD Advisory· Published Mar 19, 2020· Updated Aug 4, 2024

CVE-2020-10670

Description

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the parameter settingId of the settingDialogContent.jsp page. NOTE: this is fixed in the latest version.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canon/Oce Colorwave 500description
Canon/Oce ColorWave 3500llm-fuzzy
Range: = 4.0.0.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/156833/Oce-Colorwave-500-CSRF-XSS-Authentication-Bypass.htmlmitrex_refsource_MISC
www.redtimmy.com/red-teaming/hacking-the-oce-colorwave-printer-when-a-quick-security-assessment-determines-the-success-of-a-red-team-exercise/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000