CVE-2019-18630: Xerox Altalink b8045 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure.

Affected products

• Xerox Altalink b8045 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8055 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8065 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8075 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink b8090 Firmware: before 103.008.010.14010 (fixed in 103.008.010.14010)
• Xerox Altalink c8030 Firmware: before 103.001.010.14010 (fixed in 103.001.010.14010)
• Xerox Altalink c8035 Firmware: before 103.001.010.14010 (fixed in 103.001.010.14010)
• Xerox Altalink c8045 Firmware: before 103.002.010.14010 (fixed in 103.002.010.14010)
• Xerox Altalink c8055 Firmware: before 103.002.010.14010 (fixed in 103.002.010.14010)
• Xerox Altalink c8070 Firmware: before 103.003.010.14010 (fixed in 103.003.010.14010)

Published 2021-03-04. Last modified 2026-06-17.