critical9.8
CVE-2018-17172
The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 bef…
Impact
The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerox | Altalink C8030 Firmware | before 100.001.028.05200 |
| Xerox | Altalink C8035 Firmware | before 100.001.028.05200 |
| Xerox | Altalink C8045 Firmware | before 100.002.028.05200 |
| Xerox | Altalink C8055 Firmware | before 100.002.028.05200 |
| Xerox | Altalink C8070 Firmware | before 100.003.028.05200 |
| Xerox | Altalink B8045 Firmware | before 100.008.028.05200 |
| Xerox | Altalink B8055 Firmware | before 100.008.028.05200 |
| Xerox | Altalink B8065 Firmware | before 100.008.028.05200 |
| Xerox | Altalink B8075 Firmware | before 100.008.028.05200 |
| Xerox | Altalink B8090 Firmware | before 100.008.028.05200 |