← CVE Intelligence

CVE-2024-12510

LDAP Authentication Sever Pass-back attack PUBLISHED

Description (CNA)

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

Affected (CNA)

Vendor / product	Versions
Xerox / Versalink B400	affected 0 before 37.82.53
Xerox / Versalink B405	affected 0 before 38.82.53
Xerox / Versalink C400	affected 0 before 67.82.53
Xerox / Versalink C405	affected 0 before 68.82.53
Xerox / Versalink B600/B610	affected 0 before 32.82.53
Xerox / Versalink B605/B615	affected 0 before 33.82.53
Xerox / Versalink C500/C600	affected 0 before 61.82.53
Xerox / Versalink C505/C605	affected 0 before 62.82.53
Xerox / Versalink C7000	affected 0 before 56.75.53
Xerox / Versalink C7020/C7025/C7030	affected 0 before 57.75.53
Xerox / Versalink B7025/B7030/B7035	affected 0 before 58.75.53
Xerox / Versalink B7125/B7130/B7135	affected 0 before 59.24.53
Xerox / Versalink C7120/C7125/C7130	affected 0 before 69.24.53
Xerox / Versalink C8000/C9000	affected 0 before 70.75.53
Xerox / Versalink C8000W	affected 0 before 72.75.53
Xerox / Phaser 6510	affected 0 before 64.75.53
Xerox / WorkCentre 6515	affected 0 before 65.75.53

CWE

CWE-287

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.