CVE-2024-6333 Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

Xerox多款产品 安全漏洞

Xerox AltaLink and others are products of Xerox Corporation, U.S.A. Xerox AltaLink is a hardware device.Xerox VersaLink is a line of commercial printers.Xerox WorkCentre is a line of all-in-one printers. A security vulnerability exists in various Xerox products, which stems from the presence of a...

PT-2023-9607 · Xerox · Xerox Altalink +2

Name of the Vulnerable Software and Affected Versions: Xerox Altalink, Versalink, and WorkCentre products affected versions not specified Description: The issue is related to a lack of measures to neutralize special elements used in an operating system command, allowing an attacker to execute...

Xerox Printers Multiple Vulnerabilities (XRX23-020)

Multiple Xerox printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

Design/Logic Flaw

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as so...

CVE-2022-23968

CVE-2022-23968 affects Xerox VersaLink devices on specific firmware versions prior to 2022-01-26. A crafted TIFF file with an incomplete Image Directory, delivered via an unauthenticated HTTP POST request, can cause the device to reboot during image parsing, resulting in a permanent denial of ser...

Xerox VersaLink 安全漏洞

Xerox VersaLink is a line of commercial printers from Xerox Corporation in the United States. A security vulnerability exists in Xerox VersaLink devices that stems from a lack of authentication of files in HTTP POST requests in certain versions of firmware, which allows remote attackers to exploi...

Xerox Versalink Denial Of Service

Credits: Mahmoud Al-Qudsi + Website: https://neosmart.net/ + Source: https://neosmart.net/blog/?p=4865 + Media: https://twitter.com/mqudsi and https://twitter.com/neosmart Vendor Xerox Corporation Product Xerox Versalink printers, other Xerox printers/copiers. Vulnerability Type Remote...

Vulnerability found in Xerox printers

A researcher has found a vulnerability in VersaLink printers from Xerox. The vulnerability allows an unauthenticated remote malicious party capable of causing a denial-of-service cause. In order to exploit the vulnerability, the attacker must obtain a TIFF document with incomplete image directory...

CVE-2021-28672

Xerox Phaser 6510 before 64.65.51 and 64.59.11 Bridge, WorkCentre 6515 before 65.65.51 and 65.59.11 Bridge, VersaLink B400 before 37.65.51 and 37.59.01 Bridge, B405 before 38.65.51 and 38.59.01 Bridge, B600/B610 before 32.65.51 and 32.59.01 Bridge, B605/B615 before 33.65.51 and 33.59.01 Bridge,...

CVE-2021-28672

CVE-2021-28672 affects Xerox printers and related devices (e.g., Phaser 6510, WorkCentre 6515, VersaLink B400/B405, B600/B610, B605/B615, B7025/30/35, C400/C405/C500/C600/C505/C605/C7000/C7020/25/30, C8000/C9000, C8000W, C705) with Bridge firmware. The vulnerability is a remote code execution fla...

Vulnerability fixed in Xerox products

A vulnerability has been fixed in Xerox Phaser, WorkCentre and VersaLink. The vulnerability allows a malicious person to execute arbitrary code under the user's privileges. Xerox did not release any substantive details about this vulnerability. No CVE attribute has been assigned to this...

Westell Versalink 327W LanD Packet Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15869/info Westell Versalink 327W is prone to a denial of service vulnerability. These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets. This issue allows remote attacke...

CVE-2005-4276

Westell Versalink 327W allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party...

CVE-2005-4276

Westell Versalink 327W allows remote attackers to cause a denial of service device crash via an IP packet with the same source and destination IPs and ports, and with the SYN flag set aka LanD. NOTE: the provenance of this issue is unknown; the details are obtained solely from third party...

CVE-2005-4276

Westell Versalink 327W is affected by CVE-2005-4276, where a remote attacker can cause a denial-of-service (device crash) by sending an IP packet with identical source and destination IPs and ports and with the SYN flag set (LanD). The available descriptions indicate the issue’s provenance is unk...