xerox Archives - CVE Vulnerability

CVE-2018-17172

Sun, 26 Feb 2023 06:47:21 +0000

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

The post CVE-2018-17172 appeared first on CVE Vulnerability.

CVE-2019-19832

Sun, 26 Feb 2023 06:32:12 +0000

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName value must have a unique name.)

The post CVE-2019-19832 appeared first on CVE Vulnerability.

CVE-2019-18630

Sun, 26 Feb 2023 06:31:49 +0000

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.

The post CVE-2019-18630 appeared first on CVE Vulnerability.

CVE-2019-18629

Sun, 26 Feb 2023 06:31:49 +0000

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

The post CVE-2019-18629 appeared first on CVE Vulnerability.

CVE-2019-18628

Sun, 26 Feb 2023 06:31:49 +0000

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

The post CVE-2019-18628 appeared first on CVE Vulnerability.

CVE-2019-17184

Sun, 26 Feb 2023 06:31:29 +0000

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges.

The post CVE-2019-17184 appeared first on CVE Vulnerability.

CVE-2019-13169

Sun, 26 Feb 2023 06:30:09 +0000

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device.

The post CVE-2019-13169 appeared first on CVE Vulnerability.

CVE-2019-13172

Sun, 26 Feb 2023 06:30:09 +0000

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device.

The post CVE-2019-13172 appeared first on CVE Vulnerability.

CVE-2019-13171

Sun, 26 Feb 2023 06:30:09 +0000

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly.

The post CVE-2019-13171 appeared first on CVE Vulnerability.

CVE-2019-13170

Sun, 26 Feb 2023 06:30:09 +0000

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device.

The post CVE-2019-13170 appeared first on CVE Vulnerability.