NetSight
critical9.1

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32…

Impact

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk.

Affected products

VendorProductAffected versions
XeroxAltalink B8045 Firmware
before 103.008.020.23120
XeroxAltalink B8055 Firmware
before 103.008.020.23120
XeroxAltalink B8065 Firmware
before 103.008.020.23120
XeroxAltalink B8075 Firmware
before 103.008.020.23120
XeroxAltalink B8090 Firmware
before 103.008.020.23120
XeroxAltalink C8030 Firmware
before 103.001.020.23120
XeroxAltalink C8035 Firmware
before 103.001.020.23120
XeroxAltalink C8045 Firmware
before 103.002.020.23120
XeroxAltalink C8055 Firmware
before 103.002.020.23120
XeroxAltalink C8070 Firmware
before 103.003.020.23120

References