Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.
References
Link | Resource |
---|---|
https://security.business.xerox.com | Vendor Advisory |
https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX19AI_for_ALB80xx-C80xx_v1.1.pdf | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-03-04T06:12:03
Updated: 2021-03-04T06:12:03
Reserved: 2019-10-30T00:00:00
Link: CVE-2019-18629
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-03-04T07:15:15.113
Modified: 2021-03-11T16:21:42.453
Link: CVE-2019-18629
JSON object: View
Redhat Information
No data.
CWE