Xerox Versalink c505/c605 vulnerabilities

2 CVEs affecting Xerox Versalink c505/c605, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12511, published 2025-02-03.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-12510, published 2025-02-03. Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days. If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.
• CVE-2024-12511, published 2025-02-03. High severity, CVSS 7.6. EPSS: 0.6% chance of exploitation in the next 30 days. With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.