Xerox Altalink c8030 Firmware vulnerabilities

8 CVEs affecting Xerox Altalink c8030 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10881, published 2021-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-17172, published 2019-01-03. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows…
CVE-2019-18629, published 2021-03-04. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary…
CVE-2019-10881, published 2021-04-13. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be…
CVE-2021-28668, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities.
CVE-2021-28670, published 2021-03-29. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by…
CVE-2021-28669, published 2021-03-29. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration…
CVE-2019-18630, published 2021-03-04. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable…
CVE-2019-18628, published 2021-03-04. Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days. Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to…