CVE-2024-12511
High
Description
With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.
SeverityHigh
CVSS7.6
Exploit probability—
ProductVersalink B400
PublishedFeb 3, 2025
First seenFeb 3, 2025
How to fix
Update
- Xerox Versalink B40037.82.53 or later
- Xerox Versalink B40538.82.53 or later
- Xerox Versalink C40067.82.53 or later
- Xerox Versalink C40568.82.53 or later
- Xerox Versalink B600/B61032.82.53 or later
- Xerox Versalink B605/B61533.82.53 or later
- Xerox Versalink C500/C60061.82.53 or later
- Xerox Versalink C505/C60562.82.53 or later
- Xerox Versalink C700056.75.53 or later
- Xerox Versalink C7020/C7025/C703057.75.53 or later
- Xerox Versalink B7025/B7030/B703558.75.53 or later
- Xerox Versalink B7125/B7130/B713559.24.53 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Xerox Versalink B400 | v < 37.82.53 | 37.82.53 |
| Xerox Versalink B405 | v < 38.82.53 | 38.82.53 |
| Xerox Versalink C400 | v < 67.82.53 | 67.82.53 |
| Xerox Versalink C405 | v < 68.82.53 | 68.82.53 |
| Xerox Versalink B600/B610 | v < 32.82.53 | 32.82.53 |
| Xerox Versalink B605/B615 | v < 33.82.53 | 33.82.53 |
| Xerox Versalink C500/C600 | v < 61.82.53 | 61.82.53 |
| Xerox Versalink C505/C605 | v < 62.82.53 | 62.82.53 |
| Xerox Versalink C7000 | v < 56.75.53 | 56.75.53 |
| Xerox Versalink C7020/C7025/C7030 | v < 57.75.53 | 57.75.53 |
| Xerox Versalink B7025/B7030/B7035 | v < 58.75.53 | 58.75.53 |
| Xerox Versalink B7125/B7130/B7135 | v < 59.24.53 | 59.24.53 |
| Xerox Versalink C7120/C7125/C7130 | v < 69.24.53 | 69.24.53 |
| Xerox Versalink C8000/C9000 | v < 70.75.53 | 70.75.53 |
| Xerox Versalink C8000W | v < 72.75.53 | 72.75.53 |
| Xerox Phaser 6510 | v < 64.75.53 | 64.75.53 |
| Xerox WorkCentre 6515 | v < 65.75.53 | 65.75.53 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.