PT-2019-9404
CVE-2018-17172
·
Published
2019-01-03
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Xerox AltaLink B80xx versions prior to 100.008.028.05200
Xerox C8030/C8035 versions prior to 100.001.028.05200
Xerox C8045/C8055 versions prior to 100.002.028.05200
Xerox C8070 versions prior to 100.003.028.05200
Description
The issue allows unauthenticated command injection in the web application.
Recommendations
For Xerox AltaLink B80xx versions prior to 100.008.028.05200, update to version 100.008.028.05200 or later.
For Xerox C8030/C8035 versions prior to 100.001.028.05200, update to version 100.001.028.05200 or later.
For Xerox C8045/C8055 versions prior to 100.002.028.05200, update to version 100.002.028.05200 or later.
For Xerox C8070 versions prior to 100.003.028.05200, update to version 100.003.028.05200 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾