PT-2019-9404

CVE-2018-17172

·

Published

2019-01-03

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Xerox AltaLink B80xx versions prior to 100.008.028.05200 Xerox C8030/C8035 versions prior to 100.001.028.05200 Xerox C8045/C8055 versions prior to 100.002.028.05200 Xerox C8070 versions prior to 100.003.028.05200
Description The issue allows unauthenticated command injection in the web application.
Recommendations For Xerox AltaLink B80xx versions prior to 100.008.028.05200, update to version 100.008.028.05200 or later. For Xerox C8030/C8035 versions prior to 100.001.028.05200, update to version 100.001.028.05200 or later. For Xerox C8045/C8055 versions prior to 100.002.028.05200, update to version 100.002.028.05200 or later. For Xerox C8070 versions prior to 100.003.028.05200, update to version 100.003.028.05200 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾