CVE-2019-18630 : On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C807

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.

Published 2021-03-04 23:15:13

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2019-18630

Xerox » Altalink C8030 Firmware
Versions before (<) 103.001.010.14010
cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink C8030 » Version: N/A
Xerox » Altalink C8035 Firmware
Versions before (<) 103.001.010.14010
cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink C8035 » Version: N/A
Xerox » Altalink C8045 Firmware
Versions before (<) 103.002.010.14010
cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink C8045 » Version: N/A
Xerox » Altalink C8055 Firmware
Versions before (<) 103.002.010.14010
cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink C8055 » Version: N/A
Xerox » Altalink C8070 Firmware
Versions before (<) 103.003.010.14010
cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink C8070 » Version: N/A
Xerox » Altalink B8045 Firmware
Versions before (<) 103.008.010.14010
cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink B8045 » Version: N/A
Xerox » Altalink B8055 Firmware
Versions before (<) 103.008.010.14010
cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink B8055 » Version: N/A
Xerox » Altalink B8065 Firmware
Versions before (<) 103.008.010.14010
cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink B8065 » Version: N/A
Xerox » Altalink B8075 Firmware
Versions before (<) 103.008.010.14010
cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink B8075 » Version: N/A
Xerox » Altalink B8090 Firmware
Versions before (<) 103.008.010.14010
cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Altalink B8090 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-18630

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 54 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-18630

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2019-18630

CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-18630

https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX20I_for_ALB80xx-C80xx_v1.2.pdf

Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-18630

Products affected by CVE-2019-18630

Exploit prediction scoring system (EPSS) score for CVE-2019-18630

CVSS scores for CVE-2019-18630

CWE ids for CVE-2019-18630

References for CVE-2019-18630