Published: 10/02/2019 Updated: 13/02/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

An issue exists on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xerox workcentre_3655i_firmware
xerox workcentre_3655_firmware
xerox workcentre_5890i_firmware
xerox workcentre_5865i_firmware
xerox workcentre_5875i_firmware
xerox workcentre_5845_firmware
xerox workcentre_5865_firmware
xerox workcentre_5875_firmware
xerox workcentre_5890_firmware
xerox workcentre_5900_firmware
xerox workcentre_5900i_firmware
xerox workcentre_6655_firmware
xerox workcentre_6655i_firmware
xerox workcentre_7855_firmware
xerox workcentre_7225_firmware
xerox workcentre_7220_firmware
xerox workcentre_7220i_firmware
xerox workcentre_7225i_firmware
xerox workcentre_7855i_firmware
xerox workcentre_7845i_firmware
xerox workcentre_7835i_firmware
xerox workcentre_7830i_firmware
xerox workcentre_7830_firmware
xerox workcentre_7835_firmware
xerox workcentre_7845_firmware
xerox workcentre_7970_firmware
xerox workcentre_7970i_firmware
xerox workcentre_ec7836_firmware
xerox workcentre_ec7856_firmware

CWE-89 https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf https://nvd.nist.gov

CVE-2018-20770

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect