CVE-2021-28669
High
Description
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights.
SeverityHigh
CVSS7.5
Exploit probability—
ProductXerox Altalink B8045 Firmware
PublishedMar 29, 2021
First seenMar 29, 2021
How to fix
Update
- xerox altalink_b8045_firmware103.008.020.23120 or later
- xerox altalink_b8055_firmware103.008.020.23120 or later
- xerox altalink_b8065_firmware103.008.020.23120 or later
- xerox altalink_b8075_firmware103.008.020.23120 or later
- xerox altalink_b8090_firmware103.008.020.23120 or later
- xerox altalink_c8030_firmware103.001.020.23120 or later
- xerox altalink_c8035_firmware103.001.020.23120 or later
- xerox altalink_c8045_firmware103.002.020.23120 or later
- xerox altalink_c8055_firmware103.002.020.23120 or later
- xerox altalink_c8070_firmware103.003.020.23120 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox altalink_b8045_firmware | v < 103.008.020.23120 | 103.008.020.23120 |
| xerox altalink_b8055_firmware | v < 103.008.020.23120 | 103.008.020.23120 |
| xerox altalink_b8065_firmware | v < 103.008.020.23120 | 103.008.020.23120 |
| xerox altalink_b8075_firmware | v < 103.008.020.23120 | 103.008.020.23120 |
| xerox altalink_b8090_firmware | v < 103.008.020.23120 | 103.008.020.23120 |
| xerox altalink_c8030_firmware | v < 103.001.020.23120 | 103.001.020.23120 |
| xerox altalink_c8035_firmware | v < 103.001.020.23120 | 103.001.020.23120 |
| xerox altalink_c8045_firmware | v < 103.002.020.23120 | 103.002.020.23120 |
| xerox altalink_c8055_firmware | v < 103.002.020.23120 | 103.002.020.23120 |
| xerox altalink_c8070_firmware | v < 103.003.020.23120 | 103.003.020.23120 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.