CVE-2024-12510
Medium
Description
If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.
SeverityMedium
CVSS6.7
Exploit probability—
ProductVersalink B400
PublishedFeb 3, 2025
First seenFeb 3, 2025
Weakness typeCWE-287Improper authentication
How to fix
Update
- Xerox Versalink B40037.82.53 or later
- Xerox Versalink B40538.82.53 or later
- Xerox Versalink C40067.82.53 or later
- Xerox Versalink C40568.82.53 or later
- Xerox Versalink B600/B61032.82.53 or later
- Xerox Versalink B605/B61533.82.53 or later
- Xerox Versalink C500/C60061.82.53 or later
- Xerox Versalink C505/C60562.82.53 or later
- Xerox Versalink C700056.75.53 or later
- Xerox Versalink C7020/C7025/C703057.75.53 or later
- Xerox Versalink B7025/B7030/B703558.75.53 or later
- Xerox Versalink B7125/B7130/B713559.24.53 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Xerox Versalink B400 | v < 37.82.53 | 37.82.53 |
| Xerox Versalink B405 | v < 38.82.53 | 38.82.53 |
| Xerox Versalink C400 | v < 67.82.53 | 67.82.53 |
| Xerox Versalink C405 | v < 68.82.53 | 68.82.53 |
| Xerox Versalink B600/B610 | v < 32.82.53 | 32.82.53 |
| Xerox Versalink B605/B615 | v < 33.82.53 | 33.82.53 |
| Xerox Versalink C500/C600 | v < 61.82.53 | 61.82.53 |
| Xerox Versalink C505/C605 | v < 62.82.53 | 62.82.53 |
| Xerox Versalink C7000 | v < 56.75.53 | 56.75.53 |
| Xerox Versalink C7020/C7025/C7030 | v < 57.75.53 | 57.75.53 |
| Xerox Versalink B7025/B7030/B7035 | v < 58.75.53 | 58.75.53 |
| Xerox Versalink B7125/B7130/B7135 | v < 59.24.53 | 59.24.53 |
| Xerox Versalink C7120/C7125/C7130 | v < 69.24.53 | 69.24.53 |
| Xerox Versalink C8000/C9000 | v < 70.75.53 | 70.75.53 |
| Xerox Versalink C8000W | v < 72.75.53 | 72.75.53 |
| Xerox Phaser 6510 | v < 64.75.53 | 64.75.53 |
| Xerox WorkCentre 6515 | v < 65.75.53 | 65.75.53 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.