Olivetti d-Color MF3555
Approved changes feed: RSS · Atom
cpe:2.3:h:olivetti:d-color_mf3555:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Olivetti (237b1ee0-fec1-55cf-9234-5edfd9197e75) |
|---|---|
| Product | D Color Mf3555 (3bfc73af-9a4c-5568-8964-0bbf503b832e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25344 |
not_vulnerable | 2026-06-08 05:41:45.755597 |
Details available
An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01.Hostname field, before saving them on the server. In addition, the JavaScript malicious content is then reflected back to the end user and executed by the web browser.
Published: 2022-04-20T12:52:05.000Z
Updated: 2024-08-03T04:36:06.842Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25343 |
not_vulnerable | 2026-06-08 05:41:45.755156 |
Details available
An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the service provided by the Web Application.
Published: 2022-04-20T12:51:55.000Z
Updated: 2024-08-03T04:36:06.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25342 |
not_vulnerable | 2026-06-08 05:41:45.754617 |
Details available
An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and functionality under the /mngset/authset path. By not verifying permissions for access to resources, it allows a potential attacker to view pages that are not allowed.
Published: 2022-04-20T12:51:47.000Z
Updated: 2024-08-03T04:36:06.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.