CVE-2018-20771

This entry concerns CVE-2018-20771 affecting Xerox WorkCentre models (3655/3655i, 58XX/58XXi, 59XX/59XXi, 6655/6655i, 72XX/72XXi, 78XX/78XXi, 7970/7970i, EC7836/EC7856) prior to firmware release R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution. The reference data inclu...

CVE-2018-20767

The CVE-2018-20767 issue affects Xerox WorkCentre models (3655/3655i, 58XX/58XXi, 59XX/59XXi, 6655/6655i, 72XX/72XXi, 78XX/78XXi, 7970/7970i, EC7836/EC7856) prior to R18-05 073.xxx.0487.15000. There is authenticated remote command execution, indicating unauthenticated? (authenticated) remote cont...

CVE-2018-20770

CVE-2018-20770 affects Xerox WorkCentre models (3655/3655i, 58XX/58XXi, 59XX/59XXi, 6655/6655i, 72XX/72XXi, 78XX/78XXi, 7970/7970i, EC7836/EC7856) prior to firmware R18-05 073.xxx.0487.15000. The connected documents confirm a Blind SQL Injection vulnerability in these devices. No exploitation det...

CVE-2018-20767

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution...

CVE-2018-20771

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution...

CVE-2018-20769

CVE-2018-20769 affects Xerox WorkCentre models listed (3655/3655i, 58XX/58XXi, 59XX/59XXi, 6655/6655i, 72XX/72XXi, 78XX/78XXi, 7970/7970i, EC7836/EC7856). Root cause: Local File Inclusion vulnerability. Impact is limited to partial confidentiality according to the entry. The issue exists on devic...

CVE-2018-20769

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability...

CVE-2018-20768

CVE-2018-20768 affects Xerox WorkCentre models (3655/3655i, 58XX/58XXi, 59XX/59XXi, 6655/6655i, 72XX/72XXi, 78XX/78XXi, 7970/7970i, EC7836/EC7856) prior to firmware R18-05 073.xxx.0487.15000. The vulnerability lets an attacker execute PHP code by abusing a writable file on the device, with networ...

PT-2019-10214

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to R18-05 073.xxx.0487.15000 Description: An issue was discovered that allows unauthenticated Remote Command Execution. Recommendations: For versions prior to R18-05 073.xxx.0487.15000, update to a version that...

CVE-2018-20767: Improper Input Validation

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution...

CVE-2018-20769: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability...

CVE-2018-20771: Improper Input Validation

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution...

PT-2019-10213

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to R18-05 073.xxx.0487.15000 Description: An issue was discovered that allows Blind SQL Injection. Recommendations: For versions prior to R18-05 073.xxx.0487.15000, update to a version that includes the fix,...

PT-2019-10210

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to R18-05 073.xxx.0487.15000 Description: An issue allows an attacker to execute PHP code by leveraging a writable file. Recommendations: For versions prior to R18-05 073.xxx.0487.15000, update to a version tha...

PT-2019-10211

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to R18-05 073.xxx.0487.15000 Description: A Local File Inclusion issue was discovered. This issue affects various Xerox WorkCentre devices. Recommendations: For versions prior to R18-05 073.xxx.0487.15000, upda...

CVE-2018-20768: Improper Control of Generation of Code

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file...

CVE-2018-20770: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection...

PT-2019-10209

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to R18-05 073.xxx.0487.15000 Description: An issue was discovered that allows authenticated remote command execution. Recommendations: For versions prior to R18-05 073.xxx.0487.15000, update to a version that...

Xerox WorkCentre 3550 OpenSSL Multiple Vulnerabilities (XRX15AJ) (FREAK) (POODLE)

According to its model number and software version, the remote Xerox WorkCentre 3550 device is affected by multiple OpenSSL vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when decrypting...

Xerox WorkCentre 3025 / 3215 / 3225 OpenSSL Multiple Vulnerabilities (XRX15AM) (FREAK) (POODLE)

According to its model number and software version, the remote Xerox WorkCentre 3025 / 3215 / 3225 device is affected by multiple OpenSSL vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles padding bytes when...