![](https://avfblvgfkq.cloudimg.io/v7/https%3A%2F%2Fapi-ta-prod.utax.de%2Fresource%2Fimage%2F17518%2Flandscape_ratio4x3%2F3300%2F2475%2Fb9b24e5941cb23ac594ac29fb507e1d%2FEA5DE273E356F4EB14AF948958C53F47%2Flachende-frau-auf-der-baustelle.jpg?ci_url_encoded=1&width=900&height=675&force_format=webp&func=crop)
Important security notice for the TA P-C2655w MFP
Potential impacts on security:
XSS, CSRF, Path Traversal, Broken Access Control, Potential Buffer Overflow
Summary of weak points:
Potential weaknesses in the TA P-C2655wMFP system have been identified. The vulnerabilities can be exploited to carry out cross-site scripting (XSS), cross-site request forgery (CSRF), path traversal, broken access control, or buffer overflow attacks.
Reference numbers:
CVE-2019-13195, CVE-2019-13196, CVE-2019-13197, CVE-2019-13198, CVE-2019-13199, CVE-2019-13200, CVE-2019-13201, CVE-2019-13202, CVE-2019-13203, CVE-2019-13204, CVE-2019-13205, CVE-2019-13206
Acknowledgement:
TA Triumph-Adler GmbH would like to thank the NCC Group for reporting these vulnerabilities as it helps our company to optimise product security.
Affected product and software update:
Please use the software version below, which fixes the security vulnerabilities. For more information on how to install the updated software, please contact systemsupport@triumph-adler.net.
Product name: TA P-C2655w MFP
Updated Software Version: 2R7_2000.002.301
Product name: TA P-C2655w MFP
Updated Software Version: 2R7_2000.002.301
30. August 2019