PT-2021-9001
CVE-2019-18628
·
تاريخ النشر
2021-03-04
·
تاريخ التحديث
2021-03-05
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200
Description
The issue allows a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.
Recommendations
For Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, update to a version 101.00x.099.28200 or later to resolve the issue.
As a temporary workaround, consider restricting administrative access to the device to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾