Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Xerox Component: Altalink C8035 Firmware Clear all filters
TI-2019-08104 CVE-2019-10881 · GHSA-vcm3-phm4-6c23

Default hidden Privileged Account Vulnerability in multiple XEROX devices

Priority MEDIUM 44

Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow u…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2021-04-13 No fix listed CWE-259
TI-2021-09736 CVE-2021-28669 · GHSA-37r3-92cr-vf6c

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120…

Priority LOW 34

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without adm…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00874 Published 2021-03-29 No fix listed CWE-862
TI-2021-09737 CVE-2021-28670 · GHSA-whpg-9xjj-m9hw

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before…

Priority MEDIUM 41

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailb…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01075 Published 2021-03-29 No fix listed
TI-2019-13473 CVE-2019-18630 · GHSA-2vcr-g749-75qc

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 34

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00704 Published 2021-03-04 No fix listed CWE-312
TI-2019-13472 CVE-2019-18629 · GHSA-2w33-vxph-6jr3

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 37

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clo…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01053 Published 2021-03-04 No fix listed
TI-2019-13471 CVE-2019-18628 · GHSA-mx42-9hvj-grhj

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070…

Priority LOW 24

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryptio…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00664 Published 2021-03-04 No fix listed
TI-2019-14294 CVE-2019-19832 · GHSA-6rmg-grv7-3x87

Xerox AltaLink C8035 printers allow CSRF.

Priority LOW 39

Xerox AltaLink C8035 printers allow CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2019-12-18 No fix listed CWE-352
TI-2018-12272 CVE-2018-17172 · GHSA-7c5c-3c2x-v5q8

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before…

Priority MEDIUM 46

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injectio…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01969 Published 2019-01-03 No fix listed CWE-77