CVSS: 5.9EPSS: 0%CPEs: 223EXPL: 0CVE-2023-46327
https://notcve.org/view.php?id=CVE-2023-46327
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Multiple MFPs (Multifunction Printers) proporcionadas por FUJIFILM Business Innovation Corp. y Xerox Corporation brindan la posibilidad de exportar el contenido de su Libreta de Direcciones en forma cifrada, pero la seguridad del cifrado es insuficiente. Conociendo el proceso de cifrado y la clave de cifrado, se puede obtener información como las credenciales del servidor a partir de los datos exportados de la Libreta de Direcciones. • https://jvn.jp/en/vu/JVNVU96482726/index.html https://security.business.xerox.com/en-us/documents/bulletins https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.html • CWE-287: Improper Authentication •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-45897
https://notcve.org/view.php?id=CVE-2022-45897
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings. En dispositivos Xerox WorkCentre 3550 25.003.03.000, un atacante autenticado puede ver la configuración del servidor SMB y obtener las credenciales de texto plano almacenadas asociadas con esa configuración. • https://Xerox.com https://gist.github.com/waffl3ss/eb61d38b5c44131d3586578002c63640#file-cve-2022-45897 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-26572
https://notcve.org/view.php?id=CVE-2022-26572
Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information. Se ha detectado que Xerox ColorQube 8580 contiene un problema de control de acceso que permite a atacantes imprimir, visualizar el estado y obtener información confidencial • https://github.com/yj12341/ColorQube-8580-/blob/main/README.md •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 1CVE-2021-37354
https://notcve.org/view.php?id=CVE-2021-37354
Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Se ha detectado que Xerox Phaser 4622 versión v35.013.01.000, contiene un desbordamiento del búfer en la función sub_3226AC por medio de la variable TIMEZONE. Esta vulnerabilidad permite a atacantes causar una denegación de servicio (DoS) por medio de datos de desbordamiento diseñados • https://github.com/Ainevsia/CVE-Request/tree/main/Xerox/1 • CWE-787: Out-of-bounds Write •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-23321
https://notcve.org/view.php?id=CVE-2022-23321
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0. Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) persistente en dos campos input dentro del panel administrativo cuando son editados usuarios en la aplicación XMPie UStore en versión 12.3.7244.0 • http://xmpie.com https://www.triaxiomsecurity.com/xmpie-ustore-vulnerabilities-discovered https://www.xmpie.com/ustore-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •