CVE-2019-18630

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink versions prior to 101.00x.099.28200

Description: The issue is related to insufficient encryption resilience in the Xerox AltaLink multifunction device's firmware. This could allow a remote attacker to disclose protected information. Portions of the drive containing executable code were not encrypted, leaving it open to potential cryptographic information disclosure.

Recommendations: For versions prior to 101.00x.099.28200, update the software to version 101.00x.099.28200 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information stored on the device until the update is applied.