Priority MEDIUM 44
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow u…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01095 · Published 2021-04-13 · No fix listed CWE-259
Priority MEDIUM 44
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01082 · Published 2021-03-29 · No fix listed CWE-89
Priority LOW 34
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without adm…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00874 · Published 2021-03-29 · No fix listed CWE-862
Priority MEDIUM 41
Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailb…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01075 · Published 2021-03-29 · No fix listed
Priority LOW 34
On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypte…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00704 · Published 2021-03-04 · No fix listed CWE-312
Priority LOW 37
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clo…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01053 · Published 2021-03-04 · No fix listed
Priority LOW 24
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryptio…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00664 · Published 2021-03-04 · No fix listed
Priority MEDIUM 46
The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injectio…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01969 · Published 2019-01-03 · No fix listed CWE-77