Vulnerabilities > CVE-2019-18629 - Unspecified vulnerability in Xerox products

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

xerox

NVD

Published: 2021-03-04

Updated: 2021-03-11

Summary

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Vulnerable Configurations

Part	Description	Count
OS	Xerox Xerox Altalink B8045 Firmware - Xerox Altalink B8055 Firmware - Xerox Altalink B8065 Firmware - Xerox Altalink B8075 Firmware - Xerox Altalink B8090 Firmware - Xerox Altalink C8030 Firmware - Xerox Altalink C8035 Firmware - Xerox Altalink C8045 Firmware - Xerox Altalink C8055 Firmware - Xerox Altalink C8070 Firmware -	10
Hardware	Xerox Xerox Altalink B8045 - Xerox Altalink B8055 - Xerox Altalink B8065 - Xerox Altalink B8075 - Xerox Altalink B8090 - Xerox Altalink C8030 - Xerox Altalink C8035 - Xerox Altalink C8045 - Xerox Altalink C8055 - Xerox Altalink C8070 -	10

Summary

Vulnerable Configurations

References