NetSight
high7.5

CVE-2019-18630

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, porti…

Impact

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.

Affected products

VendorProductAffected versions
XeroxAltalink B8045 Firmware
before 103.008.010.14010
XeroxAltalink B8055 Firmware
before 103.008.010.14010
XeroxAltalink B8065 Firmware
before 103.008.010.14010
XeroxAltalink B8075 Firmware
before 103.008.010.14010
XeroxAltalink B8090 Firmware
before 103.008.010.14010
XeroxAltalink C8030 Firmware
before 103.001.010.14010
XeroxAltalink C8035 Firmware
before 103.001.010.14010
XeroxAltalink C8045 Firmware
before 103.002.010.14010
XeroxAltalink C8055 Firmware
before 103.002.010.14010
XeroxAltalink C8070 Firmware
before 103.003.010.14010

Weakness classification

References