Vulnerability Details : CVE-2019-18629
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.
Products affected by CVE-2019-18629
- cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-18629
0.45%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 61 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-18629
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
|
8.1
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.2
|
5.9
|
NIST |
References for CVE-2019-18629
-
https://security.business.xerox.com
Information Security - XeroxVendor Advisory
-
https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX19AI_for_ALB80xx-C80xx_v1.1.pdf
Vendor Advisory
Jump to