CVE-2024-6333 Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

CVE-2024-6333: Improper Neutralization of Special Elements used in an OS Command

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

Xerox多款产品 安全漏洞

Xerox AltaLink and others are products of Xerox Corporation, U.S.A. Xerox AltaLink is a hardware device.Xerox VersaLink is a line of commercial printers.Xerox WorkCentre is a line of all-in-one printers. A security vulnerability exists in various Xerox products, which stems from the presence of a...

PT-2023-9607 · Xerox · Xerox Altalink +2

Name of the Vulnerable Software and Affected Versions: Xerox Altalink, Versalink, and WorkCentre products affected versions not specified Description: The issue is related to a lack of measures to neutralize special elements used in an operating system command, allowing an attacker to execute...

Xerox Printers Multiple Vulnerabilities (XRX23-020)

Multiple Xerox printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

Design/Logic Flaw

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

CVE-2022-23968 affects Xerox VersaLink devices on specific firmware versions prior to 2022-01-26. A crafted TIFF file with an incomplete Image Directory, delivered via an unauthenticated HTTP POST request, can cause the device to reboot during image parsing, resulting in a permanent denial of ser...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968: Loop with Unreachable Exit Condition

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

Xerox VersaLink 安全漏洞

Xerox VersaLink is a line of commercial printers from Xerox Corporation in the United States. A security vulnerability exists in Xerox VersaLink devices that stems from a lack of authentication of files in HTTP POST requests in certain versions of firmware, which allows remote attackers to exploi...

PT-2022-16373

Name of the Vulnerable Software and Affected Versions Xerox VersaLink devices versions xx.42.01 through xx.50.61 Xerox VersaLink devices versions prior to xx.61.23 Description The issue allows remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request,...

Xerox Versalink Denial Of Service

Credits: Mahmoud Al-Qudsi + Website: https://neosmart.net/ + Source: https://neosmart.net/blog/?p=4865 + Media: https://twitter.com/mqudsi and https://twitter.com/neosmart Vendor Xerox Corporation Product Xerox Versalink printers, other Xerox printers/copiers. Vulnerability Type Remote...

Vulnerability found in Xerox printers

A researcher has found a vulnerability in VersaLink printers from Xerox. The vulnerability allows an unauthenticated remote malicious party capable of causing a denial-of-service cause. In order to exploit the vulnerability, the attacker must obtain a TIFF document with incomplete image directory...

CVE-2021-28672

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

CVE-2021-28672

CVE-2021-28672 affects Xerox printers and related devices (e.g., Phaser 6510, WorkCentre 6515, VersaLink B400/B405, B600/B610, B605/B615, B7025/30/35, C400/C405/C500/C600/C505/C605/C7000/C7020/25/30, C8000/C9000, C8000W, C705) with Bridge firmware. The vulnerability is a remote code execution fla...

CVE-2021-28672: Buffer Copy without Checking Size of Input

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

PT-2021-17894

Name of the Vulnerable Software and Affected Versions: Xerox Phaser 6510 versions 64.65.51 and 64.59.11 Bridge and earlier WorkCentre 6515 versions 65.65.51 and 65.59.11 Bridge and earlier VersaLink B400 versions 37.65.51 and 37.59.01 Bridge and earlier VersaLink B405 versions 38.65.51 and 38.59....