72 matches found
MAL-2025-38250 Malicious code in versalink-htu21d-device (npm)
The package versalink-htu21d-device was found to contain malicious code...
MAL-2025-38251 Malicious code in versalink-mock-device (npm)
The package versalink-mock-device was found to contain malicious code...
MAL-2025-38253 Malicious code in versalink-rmy85000-device (npm)
The package versalink-rmy85000-device was found to contain malicious code...
MAL-2025-38252 Malicious code in versalink-rain-device (npm)
The package versalink-rain-device was found to contain malicious code...
MAL-2025-38255 Malicious code in versalink-tsl2561-device (npm)
The package versalink-tsl2561-device was found to contain malicious code...
Malicious code in versalink-rmy85000-device (npm)
The package versalink-rmy85000-device was found to contain malicious code...
Malicious code in versalink-device (npm)
The package versalink-device was found to contain malicious code...
MAL-2025-38249 Malicious code in versalink-device (npm)
The package versalink-device was found to contain malicious code...
CVE-2005-4276
Westell Versalink 327W allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party...
multifunctional devices authentication disclosure
The vulnerability of microprogrammed multifunctional devices such as Versalink, Phaser, and WorkCentre is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
Versalink WorkCentre SMB FTP Unauthorized Access
The vulnerability of SMB and FTP protocol implementations of Versalink and WorkCentre software lies in the lack of access control for the address book during scanning. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Xerox Versalink Printers Vulnerabilities Could Let Hackers Steal Credentials
Xerox Versalink printers are vulnerable to pass-back attacks. Rapid7 discovers LDAP & SMB flaws CVE-2024-12510 & CVE-2024-12511. Update…...
Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)
During security testing, Rapid7 discovered that Xerox Versalink C7025 Multifunction printers MFPs were vulnerable to pass-back attacks. The affected products identified were: Xerox Versalink MFPs Firmware Version: 57.69.91 and earlier This issue has been assigned the following CVEs: CVE-2024-1251...
Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)
During security testing, Rapid7 discovered that Xerox Versalink C7025 Multifunction printers MFPs were vulnerable to pass-back attacks. The affected products identified were: Xerox Versalink MFPs Firmware Version: 57.69.91 and earlier This issue has been assigned the following CVEs: CVE-2024-1251...
Xerox Versalink 安全漏洞
Xerox VersaLink is a line of commercial printers from Xerox USA. A security vulnerability exists in Xerox Versalink that stems from the fact that authentication may be redirected to another server, exposing credentials...
Xerox Versalink 安全漏洞
Xerox VersaLink is a line of commercial printers from Xerox Corporation USA. A security vulnerability exists in Xerox Versalink that originates from access via the address book and can modify SMB/FTP settings, redirect scans and potentially capture credentials...
MFU Command Set Code Execution
The vulnerability of microprogrammed multifunctional devices MFUs such as Xerox Altalink, Versalink, and WorkCentre lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2024-6333
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...
CVE-2024-6333
CVE-2024-6333 affects Xerox AltaLink, VersaLink, and WorkCentre printers. The vulnerability is an authenticated remote code execution in the device’s software, caused by inadequate input handling that allows injection of specially crafted commands to the OS. The result is arbitrary code execution...
