New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

Security vulnerabilities have been disclosed in Xerox VersaLink C7025 Multifunction printers MFPs that could allow attackers to capture authentication credentials via pass-back attacks via Lightweight Directory Access Protocol LDAP and SMB/FTP services. "This pass-back style attack leverages a...

CVE-2024-12510

creationtimestamp| type| source ---|---|--- 2025-02-03 18:53:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113941466402330448 2025-02-03 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawtn3jz2t 2025-02-14 13:44:52+00:00| seen|...

CVE-2024-12510

Xerox Versalink C7025 MFPs (firmware 57.69.91 and earlier) are affected by CVE-2024-12510 (LDAP pass-back). A malicious actor with admin access and LDAP enabled can reconfigure the LDAP server IP on the LDAP settings page, causing LDAP lookups to authenticate against an attacker‑controlled server...