Vulnerabilities > CVE-2019-18628 - Unspecified vulnerability in Xerox products

CVSS 4.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

xerox

NVD

Published: 2021-03-04

Updated: 2021-03-05

Summary

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

Vulnerable Configurations

Part	Description	Count
OS	Xerox Xerox Altalink B8045 Firmware - Xerox Altalink B8045 Firmware 101.008.099.28200 Xerox Altalink B8045 Firmware 103.002.020.23120 Xerox Altalink B8055 Firmware - Xerox Altalink B8055 Firmware 101.008.099.28200 Xerox Altalink B8065 Firmware - Xerox Altalink B8065 Firmware 101.008.099.28200 Xerox Altalink B8075 Firmware - Xerox Altalink B8075 Firmware 101.008.099.28200 Xerox Altalink B8090 Firmware - Xerox Altalink B8090 Firmware 101.008.099.28200 Xerox Altalink C8030 Firmware - Xerox Altalink C8030 Firmware 101.001.099.28200 Xerox Altalink C8035 Firmware - Xerox Altalink C8035 Firmware 101.001.099.28200 Xerox Altalink C8045 Firmware - Xerox Altalink C8045 Firmware 101.002.099.28200 Xerox Altalink C8055 Firmware - Xerox Altalink C8055 Firmware 101.002.099.28200 Xerox Altalink C8070 Firmware - Xerox Altalink C8070 Firmware 101.003.099.28200	21
Hardware	Xerox Xerox Altalink B8045 - Xerox Altalink B8055 - Xerox Altalink B8065 - Xerox Altalink B8075 - Xerox Altalink B8090 - Xerox Altalink C8030 - Xerox Altalink C8035 - Xerox Altalink C8045 - Xerox Altalink C8055 - Xerox Altalink C8070 -	10

Summary

Vulnerable Configurations

References