CVE-2019-18629: Xerox Altalink b8045 Firmware

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Affected products

• Xerox Altalink b8045 Firmware: before 101.008.099.28200 (fixed in 101.008.099.28200)
• Xerox Altalink b8055 Firmware: before 101.008.099.28200 (fixed in 101.008.099.28200)
• Xerox Altalink b8065 Firmware: before 101.008.099.28200 (fixed in 101.008.099.28200)
• Xerox Altalink b8075 Firmware: before 101.008.099.28200 (fixed in 101.008.099.28200)
• Xerox Altalink b8090 Firmware: before 101.008.099.28200 (fixed in 101.008.099.28200)
• Xerox Altalink c8030 Firmware: before 101.001.099.28200 (fixed in 101.001.099.28200)
• Xerox Altalink c8035 Firmware: before 101.001.099.28200 (fixed in 101.001.099.28200)
• Xerox Altalink c8045 Firmware: before 101.002.099.28200 (fixed in 101.002.099.28200)
• Xerox Altalink c8055 Firmware: before 101.002.099.28200 (fixed in 101.002.099.28200)
• Xerox Altalink c8070 Firmware: before 101.003.099.28200 (fixed in 101.003.099.28200)

Published 2021-03-04. Last modified 2026-06-17.