CVE-2019-18629

Severity Score

8.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Las impresoras multifunción Xerox AltaLink B8045/B8055/B8065/B8075/B8090 y C8030/C8035/C8045/C8055/C8070 con versiones de software anteriores a 101.00x.099.28200, permiten a un atacante ejecutar un binario no deseado durante la instalación de un clon explotado. Esto requiere crear un archivo clonado y firmar ese archivo con una clave privada comprometida

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-10-30 CVE Reserved
2021-03-04 CVE Published
2023-11-18 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://security.business.xerox.com	2021-03-11
https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX19AI_for_ALB80xx-C80xx_v1.1.pdf	2021-03-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Xerox Search vendor "Xerox"	Altalink B8045 Firmware Search vendor "Xerox" for product "Altalink B8045 Firmware"	< 101.008.099.28200 Search vendor "Xerox" for product "Altalink B8045 Firmware" and version " < 101.008.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink B8045 Search vendor "Xerox" for product "Altalink B8045"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink B8055 Firmware Search vendor "Xerox" for product "Altalink B8055 Firmware"	< 101.008.099.28200 Search vendor "Xerox" for product "Altalink B8055 Firmware" and version " < 101.008.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink B8055 Search vendor "Xerox" for product "Altalink B8055"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink B8065 Firmware Search vendor "Xerox" for product "Altalink B8065 Firmware"	< 101.008.099.28200 Search vendor "Xerox" for product "Altalink B8065 Firmware" and version " < 101.008.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink B8065 Search vendor "Xerox" for product "Altalink B8065"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink B8075 Firmware Search vendor "Xerox" for product "Altalink B8075 Firmware"	< 101.008.099.28200 Search vendor "Xerox" for product "Altalink B8075 Firmware" and version " < 101.008.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink B8075 Search vendor "Xerox" for product "Altalink B8075"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink B8090 Firmware Search vendor "Xerox" for product "Altalink B8090 Firmware"	< 101.008.099.28200 Search vendor "Xerox" for product "Altalink B8090 Firmware" and version " < 101.008.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink B8090 Search vendor "Xerox" for product "Altalink B8090"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink C8030 Firmware Search vendor "Xerox" for product "Altalink C8030 Firmware"	< 101.001.099.28200 Search vendor "Xerox" for product "Altalink C8030 Firmware" and version " < 101.001.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink C8030 Search vendor "Xerox" for product "Altalink C8030"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink C8035 Firmware Search vendor "Xerox" for product "Altalink C8035 Firmware"	< 101.001.099.28200 Search vendor "Xerox" for product "Altalink C8035 Firmware" and version " < 101.001.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink C8035 Search vendor "Xerox" for product "Altalink C8035"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink C8045 Firmware Search vendor "Xerox" for product "Altalink C8045 Firmware"	< 101.002.099.28200 Search vendor "Xerox" for product "Altalink C8045 Firmware" and version " < 101.002.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink C8045 Search vendor "Xerox" for product "Altalink C8045"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink C8055 Firmware Search vendor "Xerox" for product "Altalink C8055 Firmware"	< 101.002.099.28200 Search vendor "Xerox" for product "Altalink C8055 Firmware" and version " < 101.002.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink C8055 Search vendor "Xerox" for product "Altalink C8055"	-	-	Safe
Xerox Search vendor "Xerox"	Altalink C8070 Firmware Search vendor "Xerox" for product "Altalink C8070 Firmware"	< 101.003.099.28200 Search vendor "Xerox" for product "Altalink C8070 Firmware" and version " < 101.003.099.28200"	-	Affected	in	Xerox Search vendor "Xerox"	Altalink C8070 Search vendor "Xerox" for product "Altalink C8070"	-	-	Safe