CVE-2018-17312 describes HTML Injection and Stored Cross-Site Scripting (XSS) vulnerabilities affecting RICOH Aficio MP 301 printers. These flaws allow attackers to inject malicious HTML or script code via the entryNameIn parameter when adding addresses. With a CVSS score of 6.1 (Medium), exploitation requires user interaction (UI:R) but can be executed over the network (AV:N) with low attack complexity (AC:L). While not actively exploited in the wild and lacking public exploit code or significant community discussion, successful exploitation could lead to information disclosure or unauthorized actions within the user's browser.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:ricoh:aficio_mp_301spf_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.