NetSight
high7.5

CVE-2020-36201

An issue was discovered in certain Xerox WorkCentre products.

Impact

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Affected products

VendorProductAffected versions
XeroxWorkcentre 3655 Firmware
before 075.060.000.12010
XeroxWorkcentre 3655i Firmware
before 075.060.000.12010
XeroxWorkcentre 5865 Firmware
before 075.190.010.12010
XeroxWorkcentre 5875 Firmware
before 075.190.010.12010
XeroxWorkcentre 5890 Firmware
before 075.190.010.12010
XeroxWorkcentre 5865i Firmware
before 075.190.010.12010
XeroxWorkcentre 5875i Firmware
before 075.190.010.12010
XeroxWorkcentre 5945 Firmware
before 075.091.010.12010
XeroxWorkcentre 5955 Firmware
before 075.091.010.12010
XeroxWorkcentre 5945i Firmware
before 075.091.010.12010
XeroxWorkcentre 5955i Firmware
before 075.091.010.12010
XeroxWorkcentre 6655 Firmware
before 075.110.010.12010

Weakness classification

References