Authenticated Remote Command Execution on Xerox WorkCentre Devices
CVE-2018-20767

8.8HIGH

Key Information:

Vendor

Xerox
Status
Workcentre 3655i Firmware
Vendor
CVE Published:
10 February 2019

What is CVE-2018-20767?

An issue has been reported that affects a range of Xerox WorkCentre devices, allowing an authenticated user to execute commands remotely. This vulnerability impacts multiple models including the 3655, 58XX series, and EC series devices, raising significant security concerns for organizations using these printers. The issue affects devices running firmware versions before R18-05 073.xxx.0487.15000. Users are advised to update their firmware to mitigate potential risks associated with this vulnerability.

References

https://securitydocs.business.xerox.com/wp-content/upload...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.