CVE:CVE-2017-14386
CNNVD:CNNVD-201709-446
Dell 2335dn和2355dn Multifunction Laser Printers都是美国戴尔（Dell）公司的多功能激光打印机产品。
使用V2.70.06.26 A13和V2.70.45.34 A10版本固件的Dell 2335dn和2355dn Multifunction Laser Printers中的Web用户界面存在跨站脚本漏洞。远程攻击者可利用该漏洞在用户的浏览器会话中执行任意的HTML或JavaScript代码。
solution:Upgrade dell 2355dn_firmware to a higher version than 2.70.45.34_a10,and avoid the version (,2.70.45.34_a10); Upgrade dell 2335dn_firmware to a higher version than 2.70.06.26_a13,and avoid the version (,2.70.06.26_a13)