CVE-2018-20771 (GCVE-0-2018-20771)
Vulnerability from cvelistv5 – Published: 2019-02-10 17:00 – Updated: 2024-09-16 20:17
VLAI
EPSS
VEX
Summary
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.
Severity
9.8 (Critical)
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://securitydocs.business.xerox.com/wp-conten… | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T12:12:29.263Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-02-10T17:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-20771",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf",
"refsource": "CONFIRM",
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-20771",
"datePublished": "2019-02-10T17:00:00.000Z",
"dateReserved": "2019-02-10T00:00:00.000Z",
"dateUpdated": "2024-09-16T20:17:09.382Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2018-20771",
"date": "2026-10-04",
"epss": "0.03078",
"percentile": "0.87232"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_3655i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A19352F1-8C33-4527-A746-9E10B9E24EAB",
"versionEndExcluding": "073.060.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_3655i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49DC396F-28EC-4B73-A471-CD3539A746A7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_3655_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7B24AF28-BD13-4D9E-9FAE-200E68CD503C",
"versionEndExcluding": "073.060.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_3655:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9548A64-CBFA-4562-ACCF-DC9BA10B4FC8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5890i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A34DD450-95E0-4C71-A508-569F0CC41639",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5890i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "231A161C-223D-4253-B865-7C13D346ADD7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5865i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "061430DE-FC6E-43EF-A9DE-6F5F54F8B5FA",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5865i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0C19D2E4-7D96-4261-AC03-925CE75E63CE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5875i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1B3F7482-F19F-4FFC-AE2D-B72D230E0869",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5875i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC484664-F7BE-41E5-A323-6093F9F25F6D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5845_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CDF58A59-2FA4-4526-845C-05E304635DA6",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1DC3F825-CDCA-4DE9-89B6-5B403BDDB09C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5865_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "034A6DA4-DBCF-405A-8D27-2115D8F7A9EC",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8A860EC8-45B7-41EA-BC20-718AD988B200",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5875_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "551E13CE-AE2F-4F48-9325-89212230EBDD",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "67800192-D3C8-49CD-8CDC-C4C71CF5155B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5890_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "27FE77F4-4E70-45D4-A70C-C1F9BE9FEB10",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5890:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C2D92CC6-64D9-4DE3-BA4B-F9833C8F6462",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5900_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9AFB8AE7-0496-4F86-B622-0D6117625A86",
"versionEndExcluding": "073.091.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5900:-:*:*:*:*:*:*:*",
"matchCriteriaId": "384D37DE-BC08-4A8E-8E2C-CE84D7E2DEB0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5900i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4C3C1DF-BA3A-468F-BFF6-2377C32BCD2F",
"versionEndExcluding": "073.091.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5900i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34C4AEFF-9A88-4DC8-AF5B-ABF95D899514",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_6655_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0BF6F45E-2C15-4769-9C2D-AACEDB4CD64E",
"versionEndExcluding": "073.110.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_6655:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24ED495D-E99F-40D1-B651-F39C77E307B2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_6655i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6F60633B-F949-4C9B-984D-65C6FEEEDE61",
"versionEndExcluding": "073.110.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_6655i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "75BE968D-572B-4E34-9AB5-D2B7779A3582",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7855_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "66C4672C-29F0-4869-97C3-65513F129DC6",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7855:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FC95E9A5-0E1A-43AF-87D4-E9C06C780413",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7225_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "460E9A62-7E1A-42B3-81ED-A925D16A58BB",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7225:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD9B953F-7360-4605-A016-E35DB388E73B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7220_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D5FB1928-0D1A-44DE-B7A6-3E5151DBE244",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7220:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C1D36448-38F7-4C4B-A66F-8B96F360144C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7220i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "199355B1-D932-41A2-BF37-546A387B5973",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7220i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F14C764-9AD4-4DD8-A079-9DA31218FFB8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7225i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "97E4F006-018D-4B1A-966D-8D1D469A051F",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7225i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BA084943-D663-4848-B788-AA0739BB0912",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7855i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "94B19ED3-FECC-4AE9-8A58-219280806BDC",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7855i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0B5BD6E-7584-405D-A4BB-57FF6C001BB9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7845i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3DA87C09-B219-4D4F-98AD-2C8B0ACCB108",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7845i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1E69D8D-01A5-4484-BD58-502078C8B27B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7835i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "431C0C27-4FCF-482C-AC0C-E52C24D99C6F",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7835i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5E585989-9F6F-496F-A310-DC60236A3A43",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7830i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2D6E16DF-C2A4-44AE-B391-47451CB449B0",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7830i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "41CCFB73-5A0D-4617-A5E5-7CDC2480CFF2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7830_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "81FE0CF2-25AF-444B-A80A-D71F7205F6E9",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7830:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7372F31A-6EE3-4DB2-89BF-48E2DD45477C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7835_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F646A5CD-67E3-4384-8FBF-2EB8A29F495B",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7835:-:*:*:*:*:*:*:*",
"matchCriteriaId": "327F1EC4-5FA3-4AFC-B1A0-5E0472BB7893",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7845_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B025C04C-05F5-4338-A839-F9D17B5CB1C9",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "549583A3-16EF-4FF7-B9F2-50838ADBE3EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7970_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88C61A74-74F8-469A-AEE3-0B14A4FBCC69",
"versionEndExcluding": "073.200.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7970:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF90B89B-6067-4CCD-BF54-8F0FB6106339",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7970i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "89AED18E-37FC-4DD0-B8DD-AFA170BD61C1",
"versionEndExcluding": "073.200.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7970i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD60A2AE-C2C6-498E-BC3F-6CA55BE1CE96",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_ec7836_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8AB3C031-3E05-4BAE-BA8D-41C2D75D0279",
"versionEndExcluding": "073.050.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_ec7836:-:*:*:*:*:*:*:*",
"matchCriteriaId": "857118A6-D5A2-4949-83CF-03E7C5ECFBB6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_ec7856_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17460651-5649-4A2C-ACAE-22F2DC686B75",
"versionEndExcluding": "073.020.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_ec7856:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE3B6C35-4A03-42C0-9D2A-45E9905283CD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution."
},
{
"lang": "es",
"value": "Se ha descubierto un problema en los dispositivos Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836 y EC7856 en versiones anteriores a la R18-05 073.xxx.0487.15000. Hay una ejecuci\u00f3n de comandos no autenticada remota."
}
],
"id": "CVE-2018-20771",
"lastModified": "2024-11-21T04:02:08.140",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-02-10T17:29:00.467",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_3655i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A19352F1-8C33-4527-A746-9E10B9E24EAB",
"versionEndExcluding": "073.060.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_3655i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49DC396F-28EC-4B73-A471-CD3539A746A7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_3655_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7B24AF28-BD13-4D9E-9FAE-200E68CD503C",
"versionEndExcluding": "073.060.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_3655:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9548A64-CBFA-4562-ACCF-DC9BA10B4FC8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5890i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A34DD450-95E0-4C71-A508-569F0CC41639",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5890i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "231A161C-223D-4253-B865-7C13D346ADD7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5865i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "061430DE-FC6E-43EF-A9DE-6F5F54F8B5FA",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5865i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0C19D2E4-7D96-4261-AC03-925CE75E63CE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5875i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1B3F7482-F19F-4FFC-AE2D-B72D230E0869",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5875i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC484664-F7BE-41E5-A323-6093F9F25F6D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5845_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CDF58A59-2FA4-4526-845C-05E304635DA6",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1DC3F825-CDCA-4DE9-89B6-5B403BDDB09C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5865_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "034A6DA4-DBCF-405A-8D27-2115D8F7A9EC",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5865:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8A860EC8-45B7-41EA-BC20-718AD988B200",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5875_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "551E13CE-AE2F-4F48-9325-89212230EBDD",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5875:-:*:*:*:*:*:*:*",
"matchCriteriaId": "67800192-D3C8-49CD-8CDC-C4C71CF5155B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5890_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "27FE77F4-4E70-45D4-A70C-C1F9BE9FEB10",
"versionEndExcluding": "073.190.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5890:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C2D92CC6-64D9-4DE3-BA4B-F9833C8F6462",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5900_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9AFB8AE7-0496-4F86-B622-0D6117625A86",
"versionEndExcluding": "073.091.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5900:-:*:*:*:*:*:*:*",
"matchCriteriaId": "384D37DE-BC08-4A8E-8E2C-CE84D7E2DEB0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_5900i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4C3C1DF-BA3A-468F-BFF6-2377C32BCD2F",
"versionEndExcluding": "073.091.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_5900i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34C4AEFF-9A88-4DC8-AF5B-ABF95D899514",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_6655_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0BF6F45E-2C15-4769-9C2D-AACEDB4CD64E",
"versionEndExcluding": "073.110.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_6655:-:*:*:*:*:*:*:*",
"matchCriteriaId": "24ED495D-E99F-40D1-B651-F39C77E307B2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_6655i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6F60633B-F949-4C9B-984D-65C6FEEEDE61",
"versionEndExcluding": "073.110.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_6655i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "75BE968D-572B-4E34-9AB5-D2B7779A3582",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7855_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "66C4672C-29F0-4869-97C3-65513F129DC6",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7855:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FC95E9A5-0E1A-43AF-87D4-E9C06C780413",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7225_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "460E9A62-7E1A-42B3-81ED-A925D16A58BB",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7225:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD9B953F-7360-4605-A016-E35DB388E73B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7220_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D5FB1928-0D1A-44DE-B7A6-3E5151DBE244",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7220:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C1D36448-38F7-4C4B-A66F-8B96F360144C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7220i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "199355B1-D932-41A2-BF37-546A387B5973",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7220i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0F14C764-9AD4-4DD8-A079-9DA31218FFB8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7225i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "97E4F006-018D-4B1A-966D-8D1D469A051F",
"versionEndExcluding": "073.030.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7225i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BA084943-D663-4848-B788-AA0739BB0912",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7855i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "94B19ED3-FECC-4AE9-8A58-219280806BDC",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7855i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D0B5BD6E-7584-405D-A4BB-57FF6C001BB9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7845i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3DA87C09-B219-4D4F-98AD-2C8B0ACCB108",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7845i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1E69D8D-01A5-4484-BD58-502078C8B27B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7835i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "431C0C27-4FCF-482C-AC0C-E52C24D99C6F",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7835i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5E585989-9F6F-496F-A310-DC60236A3A43",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7830i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2D6E16DF-C2A4-44AE-B391-47451CB449B0",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7830i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "41CCFB73-5A0D-4617-A5E5-7CDC2480CFF2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7830_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "81FE0CF2-25AF-444B-A80A-D71F7205F6E9",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7830:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7372F31A-6EE3-4DB2-89BF-48E2DD45477C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7835_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F646A5CD-67E3-4384-8FBF-2EB8A29F495B",
"versionEndExcluding": "073.010.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7835:-:*:*:*:*:*:*:*",
"matchCriteriaId": "327F1EC4-5FA3-4AFC-B1A0-5E0472BB7893",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7845_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B025C04C-05F5-4338-A839-F9D17B5CB1C9",
"versionEndExcluding": "073.040.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7845:-:*:*:*:*:*:*:*",
"matchCriteriaId": "549583A3-16EF-4FF7-B9F2-50838ADBE3EF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7970_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88C61A74-74F8-469A-AEE3-0B14A4FBCC69",
"versionEndExcluding": "073.200.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7970:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF90B89B-6067-4CCD-BF54-8F0FB6106339",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_7970i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "89AED18E-37FC-4DD0-B8DD-AFA170BD61C1",
"versionEndExcluding": "073.200.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_7970i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD60A2AE-C2C6-498E-BC3F-6CA55BE1CE96",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_ec7836_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8AB3C031-3E05-4BAE-BA8D-41C2D75D0279",
"versionEndExcluding": "073.050.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_ec7836:-:*:*:*:*:*:*:*",
"matchCriteriaId": "857118A6-D5A2-4949-83CF-03E7C5ECFBB6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xerox:workcentre_ec7856_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17460651-5649-4A2C-ACAE-22F2DC686B75",
"versionEndExcluding": "073.020.048.15000",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_ec7856:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE3B6C35-4A03-42C0-9D2A-45E9905283CD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution."
},
{
"lang": "es",
"value": "Se ha descubierto un problema en los dispositivos Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836 y EC7856 en versiones anteriores a la R18-05 073.xxx.0487.15000. Hay una ejecuci\u00f3n de comandos no autenticada remota."
}
],
"id": "CVE-2018-20771",
"lastModified": "2024-11-21T04:02:08.140",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-02-10T17:29:00.467",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…