CVE-2018-20771 - CVE House
Back to Database
Status published Critical CVE-2018-20771

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX,...

Vulnerability Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20771

Credits & Attribution

No credits recorded in the NVD database.

References

More from xerox

View All →
CVE-2022-45897
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can...
Unknown 0
CVE-2022-26572
Xerox ColorQube 8580 was discovered to contain an access control...
High 7.5
CVE-2022-23968
Xerox VersaLink devices on specific versions of firmware before 2022-01-26...
High 7.5
CVE-2022-23321
A persistent cross-site scripting (XSS) vulnerability exists on two input...
Medium 4.8
CVE-2022-23320
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based...
High 7.5

Affected Vendor

Affected Software

workcentre 3655i firmware, workcentre 3655 firmware, workcentre 5890i firmware, workcentre 5865i firmware, workcentre 5875i firmware, workcentre 5845 firmware, workcentre 5865 firmware, workcentre 5875 firmware, workcentre 5890 firmware, workcentre 5900 firmware, workcentre 5900i firmware, workcentre 6655 firmware, workcentre 6655i firmware, workcentre 7855 firmware, workcentre 7225 firmware, workcentre 7220 firmware, workcentre 7220i firmware, workcentre 7225i firmware, workcentre 7855i firmware, workcentre 7845i firmware, workcentre 7835i firmware, workcentre 7830i firmware, workcentre 7830 firmware, workcentre 7835 firmware, workcentre 7845 firmware, workcentre 7970 firmware, workcentre 7970i firmware, workcentre ec7836 firmware, workcentre ec7856 firmware
Vulnerable Versions:
0

Timeline

Official Publish: February 10th, 2019
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.