Lucene search

[email protected]CVE-2021-28668

HistoryMar 29, 2021 - 8:15 p.m.

CVE-2021-28668

2021-03-2920:15:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2021-28668

xerox altalink

sql injection

security vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.3%

JSON

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities.

CPENameOperatorVersion
xerox:altalink_b8045_firmwarexerox altalink b8045 firmwarelt103.008.020.23120
xerox:altalink_b8055_firmwarexerox altalink b8055 firmwarelt103.008.020.23120
xerox:altalink_b8065_firmwarexerox altalink b8065 firmwarelt103.008.020.23120
xerox:altalink_b8075_firmwarexerox altalink b8075 firmwarelt103.008.020.23120
xerox:altalink_b8090_firmwarexerox altalink b8090 firmwarelt103.008.020.23120
xerox:altalink_c8030_firmwarexerox altalink c8030 firmwarelt103.001.020.23120
xerox:altalink_c8035_firmwarexerox altalink c8035 firmwarelt103.001.020.23120
xerox:altalink_c8045_firmwarexerox altalink c8045 firmwarelt103.002.020.23120
xerox:altalink_c8055_firmwarexerox altalink c8055 firmwarelt103.002.020.23120
xerox:altalink_c8070_firmwarexerox altalink c8070 firmwarelt103.003.020.23120

CPE	Name	Operator	Version
xerox:altalink_b8045_firmware	xerox altalink b8045 firmware	lt	103.008.020.23120
xerox:altalink_b8055_firmware	xerox altalink b8055 firmware	lt	103.008.020.23120
xerox:altalink_b8065_firmware	xerox altalink b8065 firmware	lt	103.008.020.23120
xerox:altalink_b8075_firmware	xerox altalink b8075 firmware	lt	103.008.020.23120
xerox:altalink_b8090_firmware	xerox altalink b8090 firmware	lt	103.008.020.23120
xerox:altalink_c8030_firmware	xerox altalink c8030 firmware	lt	103.001.020.23120
xerox:altalink_c8035_firmware	xerox altalink c8035 firmware	lt	103.001.020.23120
xerox:altalink_c8045_firmware	xerox altalink c8045 firmware	lt	103.002.020.23120
xerox:altalink_c8055_firmware	xerox altalink c8055 firmware	lt	103.002.020.23120
xerox:altalink_c8070_firmware	xerox altalink c8070 firmware	lt	103.003.020.23120

References

securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

49.3%

JSON

Related for CVE-2021-28668

prion1 cvelist1