CVE-2019-18629 Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.

What is CVE-2019-18629?

CVE-2019-18629 is a high-severity vulnerability in n/a, published on 4 Mar 2021.

Official description

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.

Which versions are affected by CVE-2019-18629?

It affects 10 products.

Products include Xerox Altalink B8045 Firmware, Xerox Altalink B8055 Firmware, Xerox Altalink B8065 Firmware, Xerox Altalink B8075 Firmware, Xerox Altalink B8090 Firmware, Xerox Altalink C8030 Firmware and 4 more.

How do I fix CVE-2019-18629?

No fix has been published for CVE-2019-18629 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-18629 being exploited?

There is no known exploitation of CVE-2019-18629 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-28668 SQL injection in n/a Critical 9.8
• CVE-2018-17172 Command injection in n/a Critical 9.8
• CVE-2019-10881 Default hidden Privileged Account Vulnerability in multiple XEROX devices Critical 9.4
• CVE-2021-28670 Missing authorization in n/a Critical 9.1
• CVE-2021-28669 Missing authorization in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2w33-vxph-6jr3.