Lucene search

[email protected]CVE-2021-28670

HistoryMar 29, 2021 - 6:15 p.m.

CVE-2021-28670

2021-03-2918:15:13

[email protected]

web.nvd.nist.gov

xerox

altalink

vulnerability

unauthorized access

file deletion

nvd

cve-2021-28670

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

42.5%

JSON

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk.

Affected configurations

NVD

Node

xeroxaltalink_b8045_firmwareRange<103.008.020.23120

AND

xeroxaltalink_b8045Match-

Node

xeroxaltalink_b8055_firmwareRange<103.008.020.23120

AND

xeroxaltalink_b8055Match-

Node

xeroxaltalink_b8065_firmwareRange<103.008.020.23120

AND

xeroxaltalink_b8065Match-

Node

xeroxaltalink_b8075_firmwareRange<103.008.020.23120

AND

xeroxaltalink_b8075Match-

Node

xeroxaltalink_b8090_firmwareRange<103.008.020.23120

AND

xeroxaltalink_b8090Match-

Node

xeroxaltalink_c8030_firmwareRange<103.001.020.23120

AND

xeroxaltalink_c8030Match-

Node

xeroxaltalink_c8035Match-

AND

xeroxaltalink_c8035_firmwareRange<103.001.020.23120

Node

xeroxaltalink_c8045Match-

AND

xeroxaltalink_c8045_firmwareRange<103.002.020.23120

Node

xeroxaltalink_c8055Match-

AND

xeroxaltalink_c8055_firmwareRange<103.002.020.23120

Node

xeroxaltalink_c8070Match-

AND

xeroxaltalink_c8070_firmwareRange<103.003.020.23120

CPENameOperatorVersion
xerox:altalink_b8045_firmwarexerox altalink b8045 firmwarelt103.008.020.23120

CPE	Name	Operator	Version
xerox:altalink_b8045_firmware	xerox altalink b8045 firmware	lt	103.008.020.23120

References

securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

42.5%

JSON

Related for CVE-2021-28670

nvd1 cvelist1 prion1