Design/Logic Flaw

2021-03-0407:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

JSON

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

CPENameOperatorVersion
altalink_b8045_firmwarelt101.008.099.28200
altalink_b8055_firmwarelt101.008.099.28200
altalink_b8065_firmwarelt101.008.099.28200
altalink_b8075_firmwarelt101.008.099.28200
altalink_b8090_firmwarelt101.008.099.28200
altalink_c8030_firmwarelt101.001.099.28200
altalink_c8035_firmwarelt101.001.099.28200
altalink_c8045_firmwarelt101.002.099.28200
altalink_c8055_firmwarelt101.002.099.28200
altalink_c8070_firmwarelt101.003.099.28200

Name	Operator	Version
altalink_b8045_firmware	lt	101.008.099.28200
altalink_b8055_firmware	lt	101.008.099.28200
altalink_b8065_firmware	lt	101.008.099.28200
altalink_b8075_firmware	lt	101.008.099.28200
altalink_b8090_firmware	lt	101.008.099.28200
altalink_c8030_firmware	lt	101.001.099.28200
altalink_c8035_firmware	lt	101.001.099.28200
altalink_c8045_firmware	lt	101.002.099.28200
altalink_c8055_firmware	lt	101.002.099.28200
altalink_c8070_firmware	lt	101.003.099.28200