Xerox Workcentre EC7856 Firmware vulnerabilities

8 CVEs affecting Xerox Workcentre EC7856 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-36201, published 2021-01-26.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-20771, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2018-20767, published 2019-02-10. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2018-20769, published 2019-02-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2018-20768, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An…
• CVE-2020-9330, published 2020-02-21. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who…
• CVE-2018-20770, published 2019-02-10. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000.…
• CVE-2020-36201, published 2021-01-26. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970,…
• CVE-2020-26162, published 2020-10-09. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description pages.