CVEvulnerability

CVE-2018-20768

9.8 CRITICAL Published 2019-02-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.

Affected configurations

• xerox workcentre 3655i firmware (< 073.060.048.15000) • xerox workcentre 3655 firmware (< 073.060.048.15000) • xerox workcentre 5890i firmware (< 073.190.048.15000) • xerox workcentre 5865i firmware (< 073.190.048.15000) • xerox workcentre 5875i firmware (< 073.190.048.15000) • xerox workcentre 5845 firmware (< 073.190.048.15000) • xerox workcentre 5865 firmware (< 073.190.048.15000) • xerox workcentre 5875 firmware (< 073.190.048.15000) • xerox workcentre 5890 firmware (< 073.190.048.15000) • xerox workcentre 5900 firmware (< 073.091.048.15000) • xerox workcentre 5900i firmware (< 073.091.048.15000) • xerox workcentre 6655 firmware (< 073.110.048.15000) • xerox workcentre 6655i firmware (< 073.110.048.15000) • xerox workcentre 7855 firmware (< 073.040.048.15000) • xerox workcentre 7225 firmware (< 073.030.048.15000) • xerox workcentre 7220 firmware (< 073.030.048.15000) • xerox workcentre 7220i firmware (< 073.030.048.15000) • xerox workcentre 7225i firmware (< 073.030.048.15000) • xerox workcentre 7855i firmware (< 073.040.048.15000) • xerox workcentre 7845i firmware (< 073.040.048.15000) • xerox workcentre 7835i firmware (< 073.010.048.15000) • xerox workcentre 7830i firmware (< 073.010.048.15000) • xerox workcentre 7830 firmware (< 073.010.048.15000) • xerox workcentre 7835 firmware (< 073.010.048.15000) • xerox workcentre 7845 firmware (< 073.040.048.15000) • xerox workcentre 7970 firmware (< 073.200.048.15000) • xerox workcentre 7970i firmware (< 073.200.048.15000) • xerox workcentre ec7836 firmware (< 073.050.048.15000) • xerox workcentre ec7856 firmware (< 073.020.048.15000)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References