Read the docs

Xerox

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high39CVSS 7.0–8.9

Exploited now

Xerox records in CISA KEV

No Xerox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Workcentre 20 records MEDIUM Workcentre 232 12 records LOW Workcentre 238 12 records LOW Workcentre 245 12 records LOW Workcentre 255 12 records LOW Workcentre 265 12 records LOW Workcentre 275 12 records LOW Altalink C8035 Firmware 9 records MEDIUM

Records

8 records in Altalink B8045 Firmware · all components

TI-2018-12272 CVE-2018-17172 · GHSA-7c5c-3c2x-v5q8

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before…

Priority MEDIUM 46

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injectio…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01969 Published 2019-01-03 No fix listed CWE-77
TI-2019-08104 CVE-2019-10881 · GHSA-vcm3-phm4-6c23

Default hidden Privileged Account Vulnerability in multiple XEROX devices

Priority MEDIUM 44

Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow u…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2021-04-13 No fix listed CWE-259
TI-2021-09737 CVE-2021-28670 · GHSA-whpg-9xjj-m9hw

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before…

Priority MEDIUM 41

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailb…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01075 Published 2021-03-29 No fix listed
TI-2019-13472 CVE-2019-18629 · GHSA-2w33-vxph-6jr3

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 37

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clo…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01053 Published 2021-03-04 No fix listed
TI-2021-09736 CVE-2021-28669 · GHSA-37r3-92cr-vf6c

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120…

Priority LOW 34

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without adm…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00874 Published 2021-03-29 No fix listed CWE-862
TI-2019-13473 CVE-2019-18630 · GHSA-2vcr-g749-75qc

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 34

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00704 Published 2021-03-04 No fix listed CWE-312
TI-2019-13471 CVE-2019-18628 · GHSA-mx42-9hvj-grhj

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 24

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryptio…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00664 Published 2021-03-04 No fix listed
Open these records in search →