CVE-2019-17184 : Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.226

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges.

Published 2019-10-04 23:15:11

Updated 2020-08-24 17:37:01

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2019-17184

Probability of exploitation activity in the next 30 days: 0.24%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 61 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2019-17184

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2019-17184

Products affected by CVE-2019-17184

Xerox » Atlalink Firmware » Version: 101.008.089.22600
cpe:2.3:o:xerox:atlalink_firmware:101.008.089.22600:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Atlalink B8045 » Version: N/A
When used together with: Xerox » Atlalink B8055 » Version: N/A
When used together with: Xerox » Atlalink B8065 » Version: N/A
When used together with: Xerox » Atlalink B8075 » Version: N/A
When used together with: Xerox » Atlalink B8090 » Version: N/A
Xerox » Atlalink Firmware » Version: 101.001.089.22600
cpe:2.3:o:xerox:atlalink_firmware:101.001.089.22600:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Atlalink C8030 » Version: N/A
When used together with: Xerox » Atlalink C8035 » Version: N/A
Xerox » Atlalink Firmware » Version: 101.002.089.22600
cpe:2.3:o:xerox:atlalink_firmware:101.002.089.22600:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Atlalink C8045 » Version: N/A
When used together with: Xerox » Atlalink C8055 » Version: N/A
Xerox » Atlalink Firmware » Version: 101.003.089.22600
cpe:2.3:o:xerox:atlalink_firmware:101.003.089.22600:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Atlalink C8070 » Version: N/A

Vulnerability Details : CVE-2019-17184

Exploit prediction scoring system (EPSS) score for CVE-2019-17184

CVSS scores for CVE-2019-17184

References for CVE-2019-17184

Products affected by CVE-2019-17184