CVE-2019-10881
Critical
Description
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
SeverityCritical
CVSS9.8
Exploit probability—
ProductXerox Altalink B8045 Firmware
PublishedApr 13, 2021
First seenApr 13, 2021
Weakness typeCWE-259CWE-259
How to fix
Update
- xerox altalink_b8045_firmware103.008.010.14010 or later
- xerox altalink_b8055_firmware103.008.010.14010 or later
- xerox altalink_b8065_firmware103.008.010.14010 or later
- xerox altalink_b8075_firmware103.008.010.14010 or later
- xerox altalink_b8090_firmware103.008.010.14010 or later
- xerox altalink_c8030_firmware103.001.010.14010 or later
- xerox altalink_c8035_firmware103.001.010.14010 or later
- xerox altalink_c8045_firmware103.002.010.14010 or later
- xerox altalink_c8055_firmware103.002.010.14010 or later
- xerox altalink_c8070_firmware103.003.010.14010 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox altalink_b8045_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8055_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8065_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8075_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8090_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_c8030_firmware | v < 103.001.010.14010 | 103.001.010.14010 |
| xerox altalink_c8035_firmware | v < 103.001.010.14010 | 103.001.010.14010 |
| xerox altalink_c8045_firmware | v < 103.002.010.14010 | 103.002.010.14010 |
| xerox altalink_c8055_firmware | v < 103.002.010.14010 | 103.002.010.14010 |
| xerox altalink_c8070_firmware | v < 103.003.010.14010 | 103.003.010.14010 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.