Vulnerability Details CVE-2019-18629
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.5%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
References
- https://security.business.xerox.com
- https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX19AI_for_ALB80xx-C80xx_v1.1.pdf
- https://security.business.xerox.com
- https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX19AI_for_ALB80xx-C80xx_v1.1.pdf
Products affected by CVE-2019-18629
-
cpe:2.3:h:xerox:altalink_b8045:-
-
cpe:2.3:h:xerox:altalink_b8055:-
-
cpe:2.3:h:xerox:altalink_b8065:-
-
cpe:2.3:h:xerox:altalink_b8075:-
-
cpe:2.3:h:xerox:altalink_b8090:-
-
cpe:2.3:h:xerox:altalink_c8030:-
-
cpe:2.3:h:xerox:altalink_c8035:-
-
cpe:2.3:h:xerox:altalink_c8045:-
-
cpe:2.3:h:xerox:altalink_c8055:-
-
cpe:2.3:h:xerox:altalink_c8070:-
-
cpe:2.3:o:xerox:altalink_b8045_firmware:-
-
cpe:2.3:o:xerox:altalink_b8055_firmware:-
-
cpe:2.3:o:xerox:altalink_b8065_firmware:-
-
cpe:2.3:o:xerox:altalink_b8075_firmware:-
-
cpe:2.3:o:xerox:altalink_b8090_firmware:-
-
cpe:2.3:o:xerox:altalink_c8030_firmware:-
-
cpe:2.3:o:xerox:altalink_c8035_firmware:-
-
cpe:2.3:o:xerox:altalink_c8045_firmware:-
-
cpe:2.3:o:xerox:altalink_c8055_firmware:-
-
cpe:2.3:o:xerox:altalink_c8070_firmware:-