VULNERABILITY INTELLIGENCE

CVE-2019-13166

CVSS score7.5 HIGH
EPSS probability1.04%
CISA KEVNot currently listed
Published2020-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks.

Weakness classification

  • CWE-307: Improper Restriction of Excessive Authentication Attempts

Primary references