NetSight
IP …
medium4.9

CVE-2019-18628

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a u…

Impact

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

Affected products

VendorProductAffected versions
XeroxAltalink B8045 Firmware
before 103.008.010.14010
XeroxAltalink B8055 Firmware
before 103.008.010.14010
XeroxAltalink B8065 Firmware
before 103.008.010.14010
XeroxAltalink B8075 Firmware
before 103.008.010.14010
XeroxAltalink B8090 Firmware
before 103.008.010.14010
XeroxAltalink C8030 Firmware
before 103.001.010.14010
XeroxAltalink C8035 Firmware
before 103.001.010.14010
XeroxAltalink C8045 Firmware
before 103.002.010.14010
XeroxAltalink C8055 Firmware
before 103.002.010.14010
XeroxAltalink C8070 Firmware
before 103.003.010.14010

References