CVE-2019-13166

CVE-2019-13166 describes a vulnerability in certain Xerox printers, specifically the Phaser 3320, where the absence of an account lockout mechanism allows for brute-force attacks. This flaw enables attackers to extract local account credentials from the device. Rated as high severity (CVSS 7.5), the vulnerability can be exploited remotely with low complexity, leading to a high impact on confidentiality without requiring user interaction. Despite its severity, there is no evidence of active exploitation, no public exploit code available, and minimal community discussion or media coverage.