← CVE Intelligence

CVE-2019-10880

XEROX / AltaLink B8045/B8055/B8065/B8075/B8090 PUBLISHED

Description (CNA)

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.

Affected (CNA)

Vendor / productVersions
XEROX / AltaLink B8045/B8055/B8065/B8075/B8090unknown unspecified through 101.008.008.27400
XEROX / AltaLink C8030/C8035/C8045/C8055/C8070unknown unspecified through 101.001.008.27400
XEROX / WorkCentre 3655unknown unspecified through 073.060.075.34540
XEROX / WorkCentre 5845/5855/5865/5875/5890unknown unspecified through 073.190.075.34540
XEROX / WorkCentre 5945/5955unknown unspecified through 073.091.075.34540
XEROX / WorkCentre 6655unknown unspecified through 073.110.075.34540
XEROX / WorkCentre 7220/7225unknown unspecified through 073.030.075.34540
XEROX / WorkCentre 7830/7835/7845/7855unknown unspecified through 073.010.075.34540
XEROX / WorkCentre 7970unknown unspecified through 073.200.075.34540
XEROX / WorkCentre EC7836/EC7856unknown unspecified through 073.020.167.17200
XEROX / ColorQube 9301/9302/9303affected unspecified before 072.xxx.009.07200
XEROX / ColorQube 8700/8900affected unspecified before 072.xxx.009.07200
XEROX / WorkCentre 6400unknown unspecified through 061.070.100.24201
XEROX / Phaser 6700unknown unspecified through 081.140.103.22600
XEROX / Phaser 7800unknown unspecified through 081.150.103.05600
XEROX / WorkCentre 5735/5740/5745/5755/5765/5775/5790unknown unspecified through 061.132.221.21403
XEROX / WorkCentre 7525/7530/7535/7545/7556unknown unspecified through 061.121.224.18803
XEROX / WorkCentre 7755/7765/7775unknown unspecified through 061.090.220.19700

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.