CVE-2022-23968 : Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."

Published 2022-01-26 06:15:07

Updated 2022-02-03 15:46:19

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2022-23968

Xerox » Versalink Firmware
Versions up to, including, (<=) 42.01
cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Versalink B400 » Version: N/A
When used together with: Xerox » Versalink B405 » Version: N/A
When used together with: Xerox » Versalink B600 » Version: N/A
When used together with: Xerox » Versalink B610 » Version: N/A
When used together with: Xerox » Versalink B7025 » Version: N/A
When used together with: Xerox » Versalink B7030 » Version: N/A
When used together with: Xerox » Versalink B7035 » Version: N/A
When used together with: Xerox » Versalink C400 » Version: N/A
When used together with: Xerox » Versalink C405 » Version: N/A
When used together with: Xerox » Versalink C500 » Version: N/A
When used together with: Xerox » Versalink C505 » Version: N/A
When used together with: Xerox » Versalink C600 » Version: N/A
When used together with: Xerox » Versalink C605 » Version: N/A
When used together with: Xerox » Versalink C7000 » Version: N/A
When used together with: Xerox » Versalink C7020 » Version: N/A
When used together with: Xerox » Versalink C7025 » Version: N/A
When used together with: Xerox » Versalink C7030 » Version: N/A
When used together with: Xerox » Versalink C8000 » Version: N/A
When used together with: Xerox » Versalink C8000w » Version: N/A
When used together with: Xerox » Versalink C9000 » Version: N/A
Xerox » Versalink Firmware
Versions from including (>=) 50.00 and up to, including, (<=) 50.61
cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Xerox » Versalink B400 » Version: N/A
When used together with: Xerox » Versalink B405 » Version: N/A
When used together with: Xerox » Versalink B600 » Version: N/A
When used together with: Xerox » Versalink B610 » Version: N/A
When used together with: Xerox » Versalink B7025 » Version: N/A
When used together with: Xerox » Versalink B7030 » Version: N/A
When used together with: Xerox » Versalink B7035 » Version: N/A
When used together with: Xerox » Versalink C400 » Version: N/A
When used together with: Xerox » Versalink C405 » Version: N/A
When used together with: Xerox » Versalink C500 » Version: N/A
When used together with: Xerox » Versalink C505 » Version: N/A
When used together with: Xerox » Versalink C600 » Version: N/A
When used together with: Xerox » Versalink C605 » Version: N/A
When used together with: Xerox » Versalink C7000 » Version: N/A
When used together with: Xerox » Versalink C7020 » Version: N/A
When used together with: Xerox » Versalink C7025 » Version: N/A
When used together with: Xerox » Versalink C7030 » Version: N/A
When used together with: Xerox » Versalink C8000 » Version: N/A
When used together with: Xerox » Versalink C8000w » Version: N/A
When used together with: Xerox » Versalink C9000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-23968

EPSS FAQ

0.28%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-23968

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-23968

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-23968

https://twitter.com/mqudsi/status/1485756915187695618

Mahmoud Al-Qudsi on Twitter: "I'm reporting a zero-day that lets unauthenticated network users remotely brick Xerox printers. I reported this to Xerox in 2019 and decided it's been long enough. https:
Third Party Advisory
https://neosmart.net/blog/2022/xerox-vulnerability-allows-unauthenticated-network-users-to-remotely-brick-printers/

CVE-2022-23968: Xerox vulnerability allows unauthenticated users to remotely brick network printers | The NeoSmart Files
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-23968

Products affected by CVE-2022-23968

Exploit prediction scoring system (EPSS) score for CVE-2022-23968

CVSS scores for CVE-2022-23968

CWE ids for CVE-2022-23968

References for CVE-2022-23968