Xerox Workcentre 6655 Firmware vulnerabilities

8 CVEs affecting Xerox Workcentre 6655 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-36201, published 2021-01-26.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-20771, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2018-20767, published 2019-02-10. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2016-11061, published 2020-04-29. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the…
• CVE-2018-20769, published 2019-02-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2018-20768, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An…
• CVE-2020-9330, published 2020-02-21. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who…
• CVE-2018-20770, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2020-36201, published 2021-01-26. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970,…