CVE-2024-12511 — SMB/FTP Address Book Scan Pass-back attack

Description (CNA)

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

Affected (CNA)

Vendor / product	Versions
Xerox / Versalink B400	affected 0 before 37.82.53
Xerox / Versalink B405	affected 0 before 38.82.53
Xerox / Versalink C400	affected 0 before 67.82.53
Xerox / Versalink C405	affected 0 before 68.82.53
Xerox / Versalink B600/B610	affected 0 before 32.82.53
Xerox / Versalink B605/B615	affected 0 before 33.82.53
Xerox / Versalink C500/C600	affected 0 before 61.82.53
Xerox / Versalink C505/C605	affected 0 before 62.82.53
Xerox / Versalink C7000	affected 0 before 56.75.53
Xerox / Versalink C7020/C7025/C7030	affected 0 before 57.75.53
Xerox / Versalink B7025/B7030/B7035	affected 0 before 58.75.53
Xerox / Versalink B7125/B7130/B7135	affected 0 before 59.24.53
Xerox / Versalink C7120/C7125/C7130	affected 0 before 69.24.53
Xerox / Versalink C8000/C9000	affected 0 before 70.75.53
Xerox / Versalink C8000W	affected 0 before 72.75.53
Xerox / Phaser 6510	affected 0 before 64.75.53
Xerox / WorkCentre 6515	affected 0 before 65.75.53

CWE

CWE-306, CWE-522

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.