PT-2018-13696

CVE-2018-16709

·

Publicado

2018-09-07

·

Atualizado

2019-10-03

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Fuji Xerox DocuCentre-V 3065 ApeosPort-VI C3371 ApeosPort-V C4475 ApeosPort-V C3375 DocuCentre-VI C2271 ApeosPort-V C5576 DocuCentre-IV C2263 DocuCentre-V C2263 ApeosPort-V 5070
Description The issue allows remote attackers to read or write to files by sending crafted PJL commands.
Recommendations For Fuji Xerox DocuCentre-V 3065, consider restricting access to the PJL command interface until a patch is available. For ApeosPort-VI C3371, restrict access to the PJL command interface to minimize the risk of exploitation. For ApeosPort-V C4475, disable the PJL command interface as a temporary workaround. For ApeosPort-V C3375, avoid using the PJL command interface in untrusted networks. For DocuCentre-VI C2271, limit access to the PJL command interface. For ApeosPort-V C5576, restrict the use of the PJL command interface. For DocuCentre-IV C2263, consider disabling the PJL command interface. For DocuCentre-V C2263, restrict access to the PJL command interface. For ApeosPort-V 5070, limit the use of the PJL command interface.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾