TI-2022-07934 Aliases CVE-2022-23968 GHSA-4749-xq6x-59v3

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote…

LOW 37CWE-835Published 2022-01-26 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-835.

Summary

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."

Why it matters now

EPSS 0.01911 79th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPE	Versions	Role	Vendor
cpe:2.3:o:xerox:versalink_firmware::::::::	up to 42.01; 50.00 – 50.61	Vulnerable	Xerox
cpe:2.3:h:xerox:versalink_b400:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b405:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b600:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b610:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b7025:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b7030:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_b7035:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c400:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c405:-:::::::*	not specified by NVD	Running on	Xerox

cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:* Versions up to 42.01; 50.00 – 50.61 Vulnerable ·Xerox
cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox

Show 11 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:xerox:versalink_c500:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c505:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c600:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c605:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c7000:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c7020:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c7025:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c7030:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c8000:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c8000w:-:::::::*	not specified by NVD	Running on	Xerox
cpe:2.3:h:xerox:versalink_c9000:-:::::::*	not specified by NVD	Running on	Xerox

cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-23968
2026-10-03 Alias added: GHSA-4749-xq6x-59v3

References

Exploit 1

https://neosmart.net/blog/2022/xerox-vulnerability-allows-unauthenticated-network-users-to-remotely-brick-printers/

Advisory 1

https://twitter.com/mqudsi/status/1485756915187695618

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences