Xerox AltaLink Abuse Scan Feature to Delete Files (CVE-2021-28670)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505552);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/29");

  script_cve_id("CVE-2021-28670");

  script_name(english:"Xerox AltaLink Abuse Scan Feature to Delete Files (CVE-2021-28670)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035
before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and
C8070 before 103.003.030.32000 allow unauthorized users, by leveraging
the Scan To Mailbox feature, to delete arbitrary files from the disk.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?44f1de43");
  # https://securitydocs.business.xerox.com/wp-content/uploads/2021/07/cert_XRX21-011_for_ALB80xx-C80xx.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1b8423e5");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-28670");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/03/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/12/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/27");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_b8045_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_b8055_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_b8065_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_b8075_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_b8090_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_c8030_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_c8035_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_c8045_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_c8055_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:xerox:altalink_c8070_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Xerox");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Xerox');

var asset = tenable_ot::assets::get(vendor:'Xerox');

var vuln_cpes = {
    "cpe:/o:xerox:altalink_b8045_firmware" :
        {"versionEndExcluding" : "101.008.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_b8055_firmware" :
        {"versionEndExcluding" : "101.008.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_b8065_firmware" :
        {"versionEndExcluding" : "101.008.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_b8075_firmware" :
        {"versionEndExcluding" : "101.008.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_b8090_firmware" :
        {"versionEndExcluding" : "101.008.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_c8030_firmware" :
        {"versionEndExcluding" : "101.001.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_c8035_firmware" :
        {"versionEndExcluding" : "101.001.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_c8045_firmware" :
        {"versionEndExcluding" : "101.002.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_c8055_firmware" :
        {"versionEndExcluding" : "101.002.019.20200", "family" : "AltaLink"},
    "cpe:/o:xerox:altalink_c8070_firmware" :
        {"versionEndExcluding" : "101.003.019.20200", "family" : "AltaLink"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);