CVE-2021-37354: Xerox Phaser 4622 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

Affected products

• Xerox Phaser 4622 Firmware: version 35.013.01.000 only

Published 2022-02-15. Last modified 2026-06-17.