CVE-2019-18630
High
Description
On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.
SeverityHigh
CVSS7.5
Exploit probability—
ProductXerox Altalink B8045 Firmware
PublishedMar 4, 2021
First seenMar 4, 2021
How to fix
Update
- xerox altalink_b8045_firmware103.008.010.14010 or later
- xerox altalink_b8055_firmware103.008.010.14010 or later
- xerox altalink_b8065_firmware103.008.010.14010 or later
- xerox altalink_b8075_firmware103.008.010.14010 or later
- xerox altalink_b8090_firmware103.008.010.14010 or later
- xerox altalink_c8030_firmware103.001.010.14010 or later
- xerox altalink_c8035_firmware103.001.010.14010 or later
- xerox altalink_c8045_firmware103.002.010.14010 or later
- xerox altalink_c8055_firmware103.002.010.14010 or later
- xerox altalink_c8070_firmware103.003.010.14010 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox altalink_b8045_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8055_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8065_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8075_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_b8090_firmware | v < 103.008.010.14010 | 103.008.010.14010 |
| xerox altalink_c8030_firmware | v < 103.001.010.14010 | 103.001.010.14010 |
| xerox altalink_c8035_firmware | v < 103.001.010.14010 | 103.001.010.14010 |
| xerox altalink_c8045_firmware | v < 103.002.010.14010 | 103.002.010.14010 |
| xerox altalink_c8055_firmware | v < 103.002.010.14010 | 103.002.010.14010 |
| xerox altalink_c8070_firmware | v < 103.003.010.14010 | 103.003.010.14010 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.