CVE-2019-10881
Default hidden Privileged Account Vulnerability in multiple XEROX devices
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
Timeline
- CVE published
- Record last updated
Affected versions
- XEROX AltaLink B8045/B8055/B8065/B8075/B8090
Version range not reported
- XEROX AltaLink C8030/C8035/C8045/C8055/C8070
Version range not reported
- XEROX WorkCentre 3655
Version range not reported
- XEROX WorkCentre 5845/5855/5865/5875/5890
Version range not reported
- XEROX WorkCentre 5945/5955
Version range not reported
- XEROX WorkCentre 6655
Version range not reported
- XEROX WorkCentre 7220/7225
Version range not reported
- XEROX WorkCentre 7830/7835/7845/7855
Version range not reported
- XEROX WorkCentre 7970
Version range not reported
- XEROX WorkCentre EC7836/EC7856
Version range not reported
- XEROX ColorQube 9301/9302/9303
Version range not reported
- XEROX ColorQube 8700/8900
Version range not reported
- XEROX WorkCentre 6400
Version range not reported
- XEROX Phaser 6700
Version range not reported
- XEROX Phaser 7800
Version range not reported
- XEROX WorkCentre 5735/5740/5745/5755/5765/5775/5790
Version range not reported
- XEROX WorkCentre 7525/7530/7535/7545/7556
Version range not reported
- XEROX WorkCentre 7755/7765/7775
Version range not reported