CVE-2018-20768

Published: Feb 10, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.

Affected (29)

Xerox

29 products

Workcentre 3655i Firmware

Workcentre 3655 Firmware

Workcentre 5890i Firmware

Workcentre 5865i Firmware

Workcentre 5875i Firmware

Workcentre 5845 Firmware

Workcentre 5865 Firmware

Workcentre 5875 Firmware

Workcentre 5890 Firmware

Workcentre 5900 Firmware

Workcentre 5900i Firmware

Workcentre 6655 Firmware

Workcentre 6655i Firmware

Workcentre 7855 Firmware

Workcentre 7225 Firmware

Workcentre 7220 Firmware

Workcentre 7220i Firmware

Workcentre 7225i Firmware

Workcentre 7855i Firmware

Workcentre 7845i Firmware

Workcentre 7835i Firmware

Workcentre 7830i Firmware

Workcentre 7830 Firmware

Workcentre 7835 Firmware

Workcentre 7845 Firmware

Workcentre 7970 Firmware

Workcentre 7970i Firmware

Workcentre Ec7836 Firmware

Workcentre Ec7856 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 3655i Firmware	Before 073.060.048.15000

Running on/with	Platform Versions
Xerox Workcentre 3655i	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 3655 Firmware	Before 073.060.048.15000

Running on/with	Platform Versions
Xerox Workcentre 3655	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5890i Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5890i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5865i Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5865i	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5875i Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5875i	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5845 Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5845	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5865 Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5865	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5875 Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5875	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5890 Firmware	Before 073.190.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5890	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5900 Firmware	Before 073.091.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5900	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 5900i Firmware	Before 073.091.048.15000

Running on/with	Platform Versions
Xerox Workcentre 5900i	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 6655 Firmware	Before 073.110.048.15000

Running on/with	Platform Versions
Xerox Workcentre 6655	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 6655i Firmware	Before 073.110.048.15000

Running on/with	Platform Versions
Xerox Workcentre 6655i	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7855 Firmware	Before 073.040.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7855	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7225 Firmware	Before 073.030.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7225	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7220 Firmware	Before 073.030.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7220	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7220i Firmware	Before 073.030.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7220i	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7225i Firmware	Before 073.030.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7225i	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7855i Firmware	Before 073.040.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7855i	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7845i Firmware	Before 073.040.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7845i	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7835i Firmware	Before 073.010.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7835i	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7830i Firmware	Before 073.010.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7830i	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7830 Firmware	Before 073.010.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7830	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7835 Firmware	Before 073.010.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7835	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7845 Firmware	Before 073.040.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7845	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7970 Firmware	Before 073.200.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7970	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre 7970i Firmware	Before 073.200.048.15000

Running on/with	Platform Versions
Xerox Workcentre 7970i	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre Ec7836 Firmware	Before 073.050.048.15000

Running on/with	Platform Versions
Xerox Workcentre Ec7836	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xerox Workcentre Ec7856 Firmware	Before 073.020.048.15000

Running on/with	Platform Versions
Xerox Workcentre Ec7856	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf

Source: cve@mitre.org

PatchVendor Advisory

https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.