CVE-2018-20770

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-02-10

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Workcentre 3655 Firmware (Xerox)
• Workcentre 3655i Firmware (Xerox)
• Workcentre 5845 Firmware (Xerox)
• Workcentre 5865 Firmware (Xerox)
• Workcentre 5865i Firmware (Xerox)
• Workcentre 5875 Firmware (Xerox)
• Workcentre 5875i Firmware (Xerox)
• Workcentre 5890 Firmware (Xerox)
• Workcentre 5890i Firmware (Xerox)
• Workcentre 5900 Firmware (Xerox)
• Workcentre 5900i Firmware (Xerox)
• Workcentre 6655 Firmware (Xerox)
• Workcentre 6655i Firmware (Xerox)
• Workcentre 7220 Firmware (Xerox)
• Workcentre 7220i Firmware (Xerox)
• Workcentre 7225 Firmware (Xerox)
• Workcentre 7225i Firmware (Xerox)
• Workcentre 7830 Firmware (Xerox)
• Workcentre 7830i Firmware (Xerox)
• Workcentre 7835 Firmware (Xerox)
• Workcentre 7835i Firmware (Xerox)
• Workcentre 7845 Firmware (Xerox)
• Workcentre 7845i Firmware (Xerox)
• Workcentre 7855 Firmware (Xerox)
• Workcentre 7855i Firmware (Xerox)
• Workcentre 7970 Firmware (Xerox)
• Workcentre 7970i Firmware (Xerox)
• Workcentre Ec7836 Firmware (Xerox)
• Workcentre Ec7856 Firmware (Xerox)

References

• https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC…