CVE-2021-28669

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights...

CVE-2021-28669

CVE-2021-28669 affects Xerox AltaLink devices: AltaLink B80xx before 103.008.020.23120; C8030/C8035 before 103.001.020.23120; C8045/C8055 before 103.002.020.23120; and C8070 before 103.003.020.23120. The issue enables setting configuration attributes without administrative rights. Connected sourc...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28670

CVE-2021-28670 affects Xerox AltaLink devices (B8045/B8090; C8030/C8035; C8045/C8055; C8070) with Scan To Mailbox before specific firmware revisions (B8045/B8090 < 103.008.030.32000; C8030/C8035 < 103.001.030.32000; C8045/C8055 < 103.002.030.32000; C8070

CVE-2021-28668: Improper Neutralization of Special Elements used in an SQL Command

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities...

PT-2021-17892

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B80xx versions prior to 103.008.020.23120 Xerox C8030/C8035 versions prior to 103.001.020.23120 Xerox C8045/C8055 versions prior to 103.002.020.23120 Xerox C8070 versions prior to 103.003.020.23120 Description: The issue allows...

PT-2021-17891

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B80xx versions prior to 103.008.020.23120 Xerox C8030/C8035 versions prior to 103.001.020.23120 Xerox C8045/C8055 versions prior to 103.002.020.23120 Xerox C8070 versions prior to 103.003.020.23120 Description: The issue is...

PT-2021-17893

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B8045/B8090 versions before 103.008.030.32000 Xerox AltaLink C8030/C8035 versions before 103.001.030.32000 Xerox AltaLink C8045/C8055 versions before 103.002.030.32000 Xerox AltaLink C8070 versions before 103.003.030.32000...

Xerox AltaLink 安全漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that could allow an unauthorized user to delete arbitrary files from disk via the Scan Mailbox feature. The following products and versio...

Xerox AltaLink 安全漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that allows the ability to set configuration properties without requiring administrator privileges. The following products and versions a...

CVE-2021-28670: Undefined Security Weakness

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

CVE-2021-28669: Missing Authorization

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights...

Xerox AltaLink SQL注入漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A SQL injection vulnerability exists in Xerox AltaLink B80xx, which affects the following products and versions: Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before...

Xerox AltaLink Printers < 101.008.099.28200 Multiple Vulnerabilities (R19-09)

Xerox AltaLink Printers are prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Xerox AltaLink Printers Multiple Vulnerabilities (XRX20I/R20-05)

Xerox AltaLink Printers are prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Vulnerabilitiesj fixed in Xerox AltaLink systems

Xerox has fixed vulnerabilities in AltaLink systems. The vulnerabilities allow a malicious party to execute arbitrary execute arbitrary code on the system, circumvent a security measure bypass a security measure or gain access to sensitive data. No CVE ID of the vulnerabilities has been disclosed...

CVE-2019-18630

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure...