NetSight
IP …
high8.1

CVE-2019-18629

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an …

Impact

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Affected products

VendorProductAffected versions
XeroxAltalink B8045 Firmware
before 101.008.099.28200
XeroxAltalink B8055 Firmware
before 101.008.099.28200
XeroxAltalink B8065 Firmware
before 101.008.099.28200
XeroxAltalink B8075 Firmware
before 101.008.099.28200
XeroxAltalink B8090 Firmware
before 101.008.099.28200
XeroxAltalink C8030 Firmware
before 101.001.099.28200
XeroxAltalink C8035 Firmware
before 101.001.099.28200
XeroxAltalink C8045 Firmware
before 101.002.099.28200
XeroxAltalink C8055 Firmware
before 101.002.099.28200
XeroxAltalink C8070 Firmware
before 101.003.099.28200

References