CVE-2019-18628: Xerox Altalink b8045 Firmware

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

Affected products

• Xerox Altalink b8045 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8055 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8065 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8075 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8090 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink c8030 Firmware: before 103.001.010.14010 (fixed in 103.001.010.14010)
• Xerox Altalink c8035 Firmware: before 103.001.010.14010 (fixed in 103.001.010.14010)
• Xerox Altalink c8045 Firmware: before 103.002.010.14010 (fixed in 103.002.010.14010)
• Xerox Altalink c8055 Firmware: before 103.002.010.14010 (fixed in 103.002.010.14010)
• Xerox Altalink c8070 Firmware: before 103.003.010.14010 (fixed in 103.003.010.14010)

Published 2021-03-04. Last modified 2026-06-17.