CVE-2018-17172: Xerox Altalink b8045 Firmware

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

Affected products

• Xerox Altalink b8045 Firmware: before 100.008.028.05200 (fixed in 100.008.028.05200)
• Xerox Altalink b8055 Firmware: before 100.008.028.05200 (fixed in 100.008.028.05200)
• Xerox Altalink b8065 Firmware: before 100.008.028.05200 (fixed in 100.008.028.05200)
• Xerox Altalink b8075 Firmware: before 100.008.028.05200 (fixed in 100.008.028.05200)
• Xerox Altalink b8090 Firmware: before 100.008.028.05200 (fixed in 100.008.028.05200)
• Xerox Altalink c8030 Firmware: before 100.001.028.05200 (fixed in 100.001.028.05200)
• Xerox Altalink c8035 Firmware: before 100.001.028.05200 (fixed in 100.001.028.05200)
• Xerox Altalink c8045 Firmware: before 100.002.028.05200 (fixed in 100.002.028.05200)
• Xerox Altalink c8055 Firmware: before 100.002.028.05200 (fixed in 100.002.028.05200)
• Xerox Altalink c8070 Firmware: before 100.003.028.05200 (fixed in 100.003.028.05200)

Published 2019-01-03. Last modified 2026-06-17.