Lucene search

[email protected]CVE-2020-36201

HistoryJan 26, 2021 - 6:15 p.m.

CVE-2020-36201

2021-01-2618:15:55

CWE-327

[email protected]

web.nvd.nist.gov

xerox

workcentre

password

encryption

vulnerability

cve-2020-36201

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Affected configurations

NVD

Node

xeroxworkcentre_3655_firmwareRange<075.060.000.12010

AND

xeroxworkcentre_3655Match-

Node

xeroxworkcentre_3655i_firmwareRange<075.060.000.12010

AND

xeroxworkcentre_3655iMatch-

Node

xeroxworkcentre_5865_firmwareRange<075.190.010.12010

AND

xeroxworkcentre_5865Match-

Node

xeroxworkcentre_5875Match-

AND

xeroxworkcentre_5875_firmwareRange<075.190.010.12010

Node

xeroxworkcentre_5890Match-

AND

xeroxworkcentre_5890_firmwareRange<075.190.010.12010

Node

xeroxworkcentre_5865iMatch-

AND

xeroxworkcentre_5865i_firmwareRange<075.190.010.12010

Node

xeroxworkcentre_5875iMatch-

AND

xeroxworkcentre_5875i_firmwareRange<075.190.010.12010

Node

xeroxworkcentre_5945Match-

AND

xeroxworkcentre_5945_firmwareRange<075.091.010.12010

Node

xeroxworkcentre_5955Match-

AND

xeroxworkcentre_5955_firmwareRange<075.091.010.12010

Node

xeroxworkcentre_5945iMatch-

AND

xeroxworkcentre_5945i_firmwareRange<075.091.010.12010

Node

xeroxworkcentre_5955i_firmwareRange<075.091.010.12010

AND

xeroxworkcentre_5955iMatch-

Node

xeroxworkcentre_6655_firmwareRange<075.110.010.12010

AND

xeroxworkcentre_6655Match-

Node

xeroxworkcentre_6655i_firmwareRange<075.110.010.12010

AND

xeroxworkcentre_6655iMatch-

Node

xeroxworkcentre_7220_firmwareRange<075.030.000.12010

AND

xeroxworkcentre_7220Match-

Node

xeroxworkcentre_7225_firmwareRange<075.030.000.12010

AND

xeroxworkcentre_7225Match-

Node

xeroxworkcentre_7220i_firmwareRange<075.030.000.12010

AND

xeroxworkcentre_7220iMatch-

Node

xeroxworkcentre_7225i_firmwareRange<075.030.000.12010

AND

xeroxworkcentre_7225iMatch-

Node

xeroxworkcentre_7830i_firmwareRange<075.010.000.12010

AND

xeroxworkcentre_7830iMatch-

Node

xeroxworkcentre_7835i_firmwareRange<075.010.000.12010

AND

xeroxworkcentre_7835iMatch-

Node

xeroxworkcentre_7845i_firmwareRange<075.040.000.12010

AND

xeroxworkcentre_7845iMatch-

Node

xeroxworkcentre_7855i_firmwareRange<075.040.000.12010

AND

xeroxworkcentre_7855iMatch-

Node

xeroxworkcentre_7830_firmwareRange<075.010.000.12010

AND

xeroxworkcentre_7830Match-

Node

xeroxworkcentre_7835_firmwareRange<075.010.000.12010

AND

xeroxworkcentre_7835Match-

Node

xeroxworkcentre_7845_firmwareRange<075.040.000.12010

AND

xeroxworkcentre_7845Match-

Node

xeroxworkcentre_7855_firmwareRange<075.040.000.12010

AND

xeroxworkcentre_7855Match-

Node

xeroxworkcentre_7970_firmwareRange<075.200.000.12010

AND

xeroxworkcentre_7970Match-

Node

xeroxworkcentre_7970i_firmwareRange<075.200.000.12010

AND

xeroxworkcentre_7970iMatch-

Node

xeroxworkcentre_ec7836_firmwareRange<075.050.010.12010

AND

xeroxworkcentre_ec7836Match-

Node

xeroxworkcentre_ec7856_firmwareRange<075.020.010.12010

AND

xeroxworkcentre_ec7856Match-

Node

xeroxworkcentre_5890i_firmwareRange<075.190.010.12010

AND

xeroxworkcentre_5890iMatch-

CPENameOperatorVersion
xerox:workcentre_3655_firmwarexerox workcentre 3655 firmwarelt075.060.000.12010

CPE	Name	Operator	Version
xerox:workcentre_3655_firmware	xerox workcentre 3655 firmware	lt	075.060.000.12010

References

securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Related for CVE-2020-36201

prion1 nvd1 cvelist1