CVE-2019-18628

2021-03-0406:09:30

mitre

www.cve.org

xerox

altalink

printers

admin

data encryption

cryptographic disclosure

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

26.0%

JSON

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.