critical9.8
CVE-2018-20768
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devic…
Impact
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerox | Workcentre 3655i Firmware | before 073.060.048.15000 |
| Xerox | Workcentre 3655 Firmware | before 073.060.048.15000 |
| Xerox | Workcentre 5890i Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5865i Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5875i Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5845 Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5865 Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5875 Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5890 Firmware | before 073.190.048.15000 |
| Xerox | Workcentre 5900 Firmware | before 073.091.048.15000 |
| Xerox | Workcentre 5900i Firmware | before 073.091.048.15000 |
| Xerox | Workcentre 6655 Firmware | before 073.110.048.15000 |