CVE-2019-18629 - CVE House
Back to Database
Status published High CVE-2019-18629

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases...

Vulnerability Description

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18629

Credits & Attribution

No credits recorded in the NVD database.

References

More from xerox

View All →
CVE-2022-45897
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can...
Unknown 0
CVE-2022-26572
Xerox ColorQube 8580 was discovered to contain an access control...
High 7.5
CVE-2022-23968
Xerox VersaLink devices on specific versions of firmware before 2022-01-26...
High 7.5
CVE-2022-23321
A persistent cross-site scripting (XSS) vulnerability exists on two input...
Medium 4.8
CVE-2022-23320
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based...
High 7.5

Affected Vendor

Affected Software

altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware, altalink b8075 firmware, altalink b8090 firmware, altalink c8030 firmware, altalink c8035 firmware, altalink c8045 firmware, altalink c8055 firmware, altalink c8070 firmware
Vulnerable Versions:
0

Timeline

Official Publish: March 4th, 2021
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.