Lucene search

[email protected]CVE-2021-28669

HistoryMar 29, 2021 - 8:15 p.m.

CVE-2021-28669

2021-03-2920:15:00

CWE-862

[email protected]

web.nvd.nist.gov

cve-2021-28669

xerox altalink

configuration attribute

unprivileged access

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.3%

JSON

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights.

CPENameOperatorVersion
xerox:altalink_b8045_firmwarexerox altalink b8045 firmwarelt103.008.020.23120
xerox:altalink_b8055_firmwarexerox altalink b8055 firmwarelt103.008.020.23120
xerox:altalink_b8065_firmwarexerox altalink b8065 firmwarelt103.008.020.23120
xerox:altalink_b8075_firmwarexerox altalink b8075 firmwarelt103.008.020.23120
xerox:altalink_b8090_firmwarexerox altalink b8090 firmwarelt103.008.020.23120
xerox:altalink_c8030_firmwarexerox altalink c8030 firmwarelt103.001.020.23120
xerox:altalink_c8035_firmwarexerox altalink c8035 firmwarelt103.001.020.23120
xerox:altalink_c8045_firmwarexerox altalink c8045 firmwarelt103.002.020.23120
xerox:altalink_c8055_firmwarexerox altalink c8055 firmwarelt103.002.020.23120
xerox:altalink_c8070_firmwarexerox altalink c8070 firmwarelt103.003.020.23120

CPE	Name	Operator	Version
xerox:altalink_b8045_firmware	xerox altalink b8045 firmware	lt	103.008.020.23120
xerox:altalink_b8055_firmware	xerox altalink b8055 firmware	lt	103.008.020.23120
xerox:altalink_b8065_firmware	xerox altalink b8065 firmware	lt	103.008.020.23120
xerox:altalink_b8075_firmware	xerox altalink b8075 firmware	lt	103.008.020.23120
xerox:altalink_b8090_firmware	xerox altalink b8090 firmware	lt	103.008.020.23120
xerox:altalink_c8030_firmware	xerox altalink c8030 firmware	lt	103.001.020.23120
xerox:altalink_c8035_firmware	xerox altalink c8035 firmware	lt	103.001.020.23120
xerox:altalink_c8045_firmware	xerox altalink c8045 firmware	lt	103.002.020.23120
xerox:altalink_c8055_firmware	xerox altalink c8055 firmware	lt	103.002.020.23120
xerox:altalink_c8070_firmware	xerox altalink c8070 firmware	lt	103.003.020.23120

References

securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.3%

JSON

Related for CVE-2021-28669

prion1 cvelist1