CVE-2020-36201
High
Description
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
SeverityHigh
CVSS7.5
Exploit probability—
ProductXerox Workcentre 3655 Firmware
PublishedJan 26, 2021
First seenJan 26, 2021
How to fix
Update
- xerox workcentre_3655_firmware075.060.000.12010 or later
- xerox workcentre_3655i_firmware075.060.000.12010 or later
- xerox workcentre_5865_firmware075.190.010.12010 or later
- xerox workcentre_5875_firmware075.190.010.12010 or later
- xerox workcentre_5890_firmware075.190.010.12010 or later
- xerox workcentre_5865i_firmware075.190.010.12010 or later
- xerox workcentre_5875i_firmware075.190.010.12010 or later
- xerox workcentre_5945_firmware075.091.010.12010 or later
- xerox workcentre_5955_firmware075.091.010.12010 or later
- xerox workcentre_5945i_firmware075.091.010.12010 or later
- xerox workcentre_5955i_firmware075.091.010.12010 or later
- xerox workcentre_6655_firmware075.110.010.12010 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox workcentre_3655_firmware | v < 075.060.000.12010 | 075.060.000.12010 |
| xerox workcentre_3655i_firmware | v < 075.060.000.12010 | 075.060.000.12010 |
| xerox workcentre_5865_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
| xerox workcentre_5875_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
| xerox workcentre_5890_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
| xerox workcentre_5865i_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
| xerox workcentre_5875i_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
| xerox workcentre_5945_firmware | v < 075.091.010.12010 | 075.091.010.12010 |
| xerox workcentre_5955_firmware | v < 075.091.010.12010 | 075.091.010.12010 |
| xerox workcentre_5945i_firmware | v < 075.091.010.12010 | 075.091.010.12010 |
| xerox workcentre_5955i_firmware | v < 075.091.010.12010 | 075.091.010.12010 |
| xerox workcentre_6655_firmware | v < 075.110.010.12010 | 075.110.010.12010 |
| xerox workcentre_6655i_firmware | v < 075.110.010.12010 | 075.110.010.12010 |
| xerox workcentre_7220_firmware | v < 075.030.000.12010 | 075.030.000.12010 |
| xerox workcentre_7225_firmware | v < 075.030.000.12010 | 075.030.000.12010 |
| xerox workcentre_7220i_firmware | v < 075.030.000.12010 | 075.030.000.12010 |
| xerox workcentre_7225i_firmware | v < 075.030.000.12010 | 075.030.000.12010 |
| xerox workcentre_7830i_firmware | v < 075.010.000.12010 | 075.010.000.12010 |
| xerox workcentre_7835i_firmware | v < 075.010.000.12010 | 075.010.000.12010 |
| xerox workcentre_7845i_firmware | v < 075.040.000.12010 | 075.040.000.12010 |
| xerox workcentre_7855i_firmware | v < 075.040.000.12010 | 075.040.000.12010 |
| xerox workcentre_7830_firmware | v < 075.010.000.12010 | 075.010.000.12010 |
| xerox workcentre_7835_firmware | v < 075.010.000.12010 | 075.010.000.12010 |
| xerox workcentre_7845_firmware | v < 075.040.000.12010 | 075.040.000.12010 |
| xerox workcentre_7855_firmware | v < 075.040.000.12010 | 075.040.000.12010 |
| xerox workcentre_7970_firmware | v < 075.200.000.12010 | 075.200.000.12010 |
| xerox workcentre_7970i_firmware | v < 075.200.000.12010 | 075.200.000.12010 |
| xerox workcentre_ec7836_firmware | v < 075.050.010.12010 | 075.050.010.12010 |
| xerox workcentre_ec7856_firmware | v < 075.020.010.12010 | 075.020.010.12010 |
| xerox workcentre_5890i_firmware | v < 075.190.010.12010 | 075.190.010.12010 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.