CVE-2019-18628

Name of the Vulnerable Software and Affected Versions Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200

Description The issue allows a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

Recommendations For Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, update to a version 101.00x.099.28200 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to the device to minimize the risk of exploitation.