CVE-2019-18629
High
Description
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.
SeverityHigh
CVSS8.1
Exploit probability—
ProductXerox Altalink B8045 Firmware
PublishedMar 4, 2021
First seenMar 4, 2021
How to fix
Update
- xerox altalink_b8045_firmware101.008.099.28200 or later
- xerox altalink_b8055_firmware101.008.099.28200 or later
- xerox altalink_b8065_firmware101.008.099.28200 or later
- xerox altalink_b8075_firmware101.008.099.28200 or later
- xerox altalink_b8090_firmware101.008.099.28200 or later
- xerox altalink_c8030_firmware101.001.099.28200 or later
- xerox altalink_c8035_firmware101.001.099.28200 or later
- xerox altalink_c8045_firmware101.002.099.28200 or later
- xerox altalink_c8055_firmware101.002.099.28200 or later
- xerox altalink_c8070_firmware101.003.099.28200 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox altalink_b8045_firmware | v < 101.008.099.28200 | 101.008.099.28200 |
| xerox altalink_b8055_firmware | v < 101.008.099.28200 | 101.008.099.28200 |
| xerox altalink_b8065_firmware | v < 101.008.099.28200 | 101.008.099.28200 |
| xerox altalink_b8075_firmware | v < 101.008.099.28200 | 101.008.099.28200 |
| xerox altalink_b8090_firmware | v < 101.008.099.28200 | 101.008.099.28200 |
| xerox altalink_c8030_firmware | v < 101.001.099.28200 | 101.001.099.28200 |
| xerox altalink_c8035_firmware | v < 101.001.099.28200 | 101.001.099.28200 |
| xerox altalink_c8045_firmware | v < 101.002.099.28200 | 101.002.099.28200 |
| xerox altalink_c8055_firmware | v < 101.002.099.28200 | 101.002.099.28200 |
| xerox altalink_c8070_firmware | v < 101.003.099.28200 | 101.003.099.28200 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.