Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…
Priority LOW 24Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.
Why it matters now
EPSS 0.00664 51st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:* | before 103.008.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_b8045:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:* | before 103.008.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_b8055:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:* | before 103.008.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_b8065:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:* | before 103.008.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_b8075:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:* | before 103.008.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_b8090:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
- cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:* Versions before 103.008.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_b8045:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:* Versions before 103.008.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_b8055:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:* Versions before 103.008.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_b8065:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:* Versions before 103.008.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_b8075:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:* Versions before 103.008.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_b8090:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:* | before 103.001.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_c8030:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:* | before 103.001.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_c8035:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:* | before 103.002.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_c8045:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:* | before 103.002.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_c8055:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:* | before 103.003.010.14010 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:altalink_c8070:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
- cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:* Versions before 103.001.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_c8030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:* Versions before 103.001.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_c8035:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:* Versions before 103.002.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_c8045:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:* Versions before 103.002.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_c8055:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:* Versions before 103.003.010.14010 Vulnerable ·Xerox
- cpe:2.3:h:xerox:altalink_c8070:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-18628
- 2026-10-03 Alias added: GHSA-mx42-9hvj-grhj
- 2026-10-04 EPSS moved to the 50th–90th percentile
References
More Xerox Altalink B8045 Firmware vulnerabilities
- TI-2018-12272 The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before… CVSS 3.0CRITICAL 9.8
- TI-2021-09735 Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120… CVSS 3.1CRITICAL 9.8
- TI-2019-08104 Default hidden Privileged Account Vulnerability in multiple XEROX devices CVSS 3.1CRITICAL 9.8
- TI-2021-09737 Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before… CVSS 3.1CRITICAL 9.1
- TI-2019-13472 Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070… CVSS 3.1HIGH 8.1
- TI-2021-09736 Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120… CVSS 3.1HIGH 7.5
Sources
- CVE-2019-18628 · CVE Program
- CVE-2019-18628 · NVD
- FIRST EPSS
- GHSA-mx42-9hvj-grhj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences