Riskcovery

CVE-2019-10881

Default hidden Privileged Account Vulnerability in multiple XEROX devices

State
Published
Severity
9.4 Critical
Published
Apr 13, 2021
Updated
Aug 4, 2024
Reserved
Apr 5, 2019

Read the record on cve.org

Description

Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.

Scores

CVSSScoreVectorSource
3.09.4 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:Hairbus

Weaknesses

Affected Products

ProductVersions
AltaLink B8045/B8055/B8065/B8075/B8090XEROX
  • n/aAffected
AltaLink C8030/C8035/C8045/C8055/C8070XEROX
  • n/aAffected
WorkCentre 3655XEROX
  • n/aAffected
WorkCentre 5845/5855/5865/5875/5890XEROX
  • n/aAffected
WorkCentre 5945/5955XEROX
  • n/aAffected
WorkCentre 6655XEROX
  • n/aAffected
WorkCentre 7220/7225XEROX
  • n/aAffected
WorkCentre 7830/7835/7845/7855XEROX
  • n/aAffected
WorkCentre 7970XEROX
  • n/aAffected
WorkCentre EC7836/EC7856XEROX
  • n/aAffected
ColorQube 9301/9302/9303XEROX
  • n/aAffected
ColorQube 8700/8900XEROX
  • n/aAffected
WorkCentre 6400XEROX
  • n/aAffected
Phaser 6700XEROX
  • n/aAffected
Phaser 7800XEROX
  • n/aAffected
WorkCentre 5735/5740/5745/5755/5765/5775/5790XEROX
  • n/aAffected
WorkCentre 7525/7530/7535/7545/7556XEROX
  • n/aAffected
WorkCentre 7755/7765/7775XEROX
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.