Access Control Issue in Xerox ColorQube 8580
CVE-2022-26572

7.5HIGH

Key Information:

Vendor
Xerox
Status
Colorqube 8580 Firmware
Vendor
CVE Published:
4 April 2022

Summary

The Xerox ColorQube 8580 contains an access control issue that could allow attackers to gain unauthorized access to print jobs and view device status. Additionally, this vulnerability may enable malicious actors to extract sensitive information from the device, posing a significant risk to users relying on this printer for secure document handling. It is crucial for users to apply any available security updates and review their network security practices to mitigate potential exploitation.

References

https://github.com/yj12341/ColorQube-8580-/blob/main/READ...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.