Xerox Vulnerabilidad

Cronología

Escribe

Producto

Xerox WorkCentre34
Xerox AltaLink C80358
Xerox Phaser 33208
Xerox AltaLink C80307
Xerox AltaLink C80457

Contramedidas

Official Fix54
Temporary Fix0
Workaround5
Unavailable2
Not Defined43

Explotabilidad

High5
Functional1
Proof-of-Concept20
Unproven0
Not Defined78

Vector de acceso

Not Defined0
Physical0
Local6
Adjacent13
Network85

Autenticación

Not Defined0
High0
Low18
None86

La interacción del usuario

Not Defined0
Required17
None87

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤513
≤627
≤724
≤821
≤911
≤107

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤521
≤631
≤721
≤813
≤913
≤104

VulDB

≤10
≤20
≤30
≤410
≤514
≤623
≤721
≤829
≤90
≤107

NVD

≤10
≤20
≤30
≤40
≤51
≤61
≤76
≤86
≤94
≤1014

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k18
<2k48
<5k38
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k102
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (97): 6115 (4), AltaLink B80xx (2), AltaLink B8045 (5), AltaLink B8055 (4), AltaLink B8065 (4), AltaLink B8075 (4), AltaLink B8090 (5), AltaLink C8030 (7), AltaLink C8035 (8), AltaLink C8045 (7), AltaLink C8055 (7), AltaLink C8070 (7), ApeosPort (1), ApeosPort-V 5070 (1), ApeosPort-V C3375 (1), ApeosPort-V C4475 (1), ApeosPort-V C5576 (1), ApeosPort-VI C3371 (1), ApeosPort-VII (1), AtlaLink B8045 (1), AtlaLink B8055 (1), AtlaLink B8065 (1), AtlaLink B8075 (1), AtlaLink B8090 C8030 (1), AtlaLink C8035 (1), AtlaLink C8045 (1), AtlaLink C8055 (1), AtlaLink C8070 (1), CentreWare Web (2), ColorQube 8580 (2), ColorQube 8700 (1), ColorQube 8900 (1), ColorQube 9301 (1), ColorQube 9302 (1), ColorQube 9303 (1), CopyCentre (1), Copycentre C75 (4), DocuCentre-IV C2263 (1), DocuCentre-V 3065 (1), DocuCentre-V C2263 (1), DocuCentre-VI C2271 (1), DocuCentre-VII (1), DocuColor 4LP (1), DocuPrint (1), DocuShare (4), Document Centre 440 (2), Document Centre 535 (2), Docuprint 211 (2), Docuprint N40 (1), Docutech 6110 (4), Fiery Webtools (1), MFP (1), Phaser (1), Phaser 3320 (8), Phaser 4622 (1), Phaser 6510 (3), Printer (1), VersaLink (1), VersaLink B400 (3), VersaLink B405 (3), VersaLink B600 (3), VersaLink B605 (3), VersaLink B610 (3), VersaLink B615 (3), VersaLink B7025 (3), VersaLink B7030 (3), VersaLink B7035 (3), VersaLink C400 (3), VersaLink C405 (3), VersaLink C500 (3), VersaLink C505 (3), VersaLink C600 (3), VersaLink C605 (3), VersaLink C7000 (3), VersaLink C7020 (3), VersaLink C7025 (3), VersaLink C7030 (3), VersaLink C8000 (3), VersaLink C8000W (2), VersaLink C9000 (3), WorkCentre (34), WorkCentre 3550 (1), WorkCentre 6515 (3), WorkCentre EC7836 (1), WorkCentre EC7856 (1), WorkCentre Printer (1), Workcentre 275 (5), Workcentre 2636 (3), Workcentre 5655 (1), Workcentre 6400 Net Controller (1), Workcentre M35 (1), Workcentre M45 (1), Xerox 4590 (1), Xerox AltaLink B80xx (1), Xerox AltaLink C8045 (1), Xerox AltaLink C8055 (1), Xerox AltaLink C8070 (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-11-024.54.5Fujifilm/Xerox MFP Address Book Export cifrado débilDesconocidoNot DefinedNot Defined0.000560.02CVE-2023-46327
2023-01-315.05.0Xerox WorkCentre 3550 SMB Server Setting cifrado débilPrinting SoftwareNot DefinedNot Defined0.000640.00CVE-2022-45897
2022-04-055.55.3Xerox ColorQube 8580 escalada de privilegiosDesconocidoNot DefinedNot Defined0.001500.00CVE-2022-26572
2022-02-163.53.4Xerox Phaser 4622 sub_3226AC denegación de servicioDesconocidoNot DefinedNot Defined0.002340.00CVE-2021-37354
2022-01-267.57.5Xerox VersaLink TIFF File denegación de servicioDesconocidoNot DefinedNot Defined0.001630.03CVE-2022-23968
2021-04-147.37.0Xerox AltaLink C8070 autenticación débilDesconocidoNot DefinedOfficial Fix0.002220.02CVE-2019-10881
2021-03-306.36.0Xerox VersaLink C9000 Web User Interface Privilege EscalationPrinting SoftwareNot DefinedOfficial Fix0.003460.03CVE-2021-28673
2021-03-306.36.0Xerox Phaser 6510 Parameter desbordamiento de búferPrinting SoftwareNot DefinedOfficial Fix0.006590.00CVE-2021-28672
2021-03-306.36.0Xerox Phaser 6510 Web User Interface Privilege EscalationPrinting SoftwareNot DefinedOfficial Fix0.004110.00CVE-2021-28671
2021-03-306.86.5Xerox AltaLink C8070 Scan to Mailbox denegación de servicioDesconocidoNot DefinedOfficial Fix0.001030.00CVE-2021-28670
2021-03-306.56.2Xerox AltaLink C8070 Configuration Attribute escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000700.00CVE-2021-28669
2021-03-308.07.7Xerox Xerox AltaLink C8070 sql injectionDesconocidoNot DefinedOfficial Fix0.001380.03CVE-2021-28668
2021-03-255.55.5Fuji Xerox DocuCentre-VII/ApeosPort-VII/ApeosPort/DocuPrint Command denegación de servicioDesconocidoNot DefinedNot Defined0.001730.04CVE-2021-20679
2021-03-055.45.2Xerox AltaLink C8070 Drive Encryption cifrado débilDesconocidoNot DefinedOfficial Fix0.001680.00CVE-2019-18630
2021-03-046.36.0Xerox AltaLink C8070 Clone Install Privilege EscalationDesconocidoNot DefinedOfficial Fix0.002440.00CVE-2019-18629
2021-03-044.34.1Xerox AltaLink C8070 cifrado débilDesconocidoNot DefinedOfficial Fix0.000610.00CVE-2019-18628
2021-01-275.55.5Xerox WorkCentre escalada de privilegiosPrinting SoftwareNot DefinedNot Defined0.001680.00CVE-2020-36201
2020-12-036.36.0Xerox DocuShare XML escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2020-27177
2020-10-094.84.6Xerox WorkCentre EC7836/WorkCentre EC7856 Description Page cross site scriptingPrinting SoftwareNot DefinedOfficial Fix0.000840.00CVE-2020-26162
2020-03-138.58.5Xerox Phaser 3320 Web Application desbordamiento de búferDesconocidoNot DefinedNot Defined0.007080.04CVE-2019-13172
2020-03-137.87.8Xerox Phaser 3320 Google Cloud Print memcpy desbordamiento de búferDesconocidoNot DefinedNot Defined0.006690.04CVE-2019-13171
2020-03-135.25.2Xerox Phaser 3320 cross site request forgeryDesconocidoNot DefinedNot Defined0.000530.00CVE-2019-13170
2020-03-138.58.5Xerox Phaser 3320 HTTP Header desbordamiento de búferDesconocidoNot DefinedNot Defined0.006690.00CVE-2019-13169
2020-03-138.58.5Xerox Phaser 3320 IPP Service desbordamiento de búferDesconocidoNot DefinedNot Defined0.005400.00CVE-2019-13168
2020-03-135.25.2Xerox Phaser 3320 Web Application Stored cross site scriptingDesconocidoNot DefinedNot Defined0.000960.00CVE-2019-13167

79 no se muestran más entradas

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!