7.5

CVE-2020-36201

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xerox ≫ Workcentre 3655 Firmware Version < 075.060.000.12010
   Xerox ≫ Workcentre 3655 Version -
Xerox ≫ Workcentre 3655i Firmware Version < 075.060.000.12010
   Xerox ≫ Workcentre 3655i Version -
Xerox ≫ Workcentre 5865 Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5865 Version -
Xerox ≫ Workcentre 5875 Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5875 Version -
Xerox ≫ Workcentre 5890 Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5890 Version -
Xerox ≫ Workcentre 5865i Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5865i Version -
Xerox ≫ Workcentre 5875i Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5875i Version -
Xerox ≫ Workcentre 5945 Firmware Version < 075.091.010.12010
   Xerox ≫ Workcentre 5945 Version -
Xerox ≫ Workcentre 5955 Firmware Version < 075.091.010.12010
   Xerox ≫ Workcentre 5955 Version -
Xerox ≫ Workcentre 5945i Firmware Version < 075.091.010.12010
   Xerox ≫ Workcentre 5945i Version -
Xerox ≫ Workcentre 5955i Firmware Version < 075.091.010.12010
   Xerox ≫ Workcentre 5955i Version -
Xerox ≫ Workcentre 6655 Firmware Version < 075.110.010.12010
   Xerox ≫ Workcentre 6655 Version -
Xerox ≫ Workcentre 6655i Firmware Version < 075.110.010.12010
   Xerox ≫ Workcentre 6655i Version -
Xerox ≫ Workcentre 7220 Firmware Version < 075.030.000.12010
   Xerox ≫ Workcentre 7220 Version -
Xerox ≫ Workcentre 7225 Firmware Version < 075.030.000.12010
   Xerox ≫ Workcentre 7225 Version -
Xerox ≫ Workcentre 7220i Firmware Version < 075.030.000.12010
   Xerox ≫ Workcentre 7220i Version -
Xerox ≫ Workcentre 7225i Firmware Version < 075.030.000.12010
   Xerox ≫ Workcentre 7225i Version -
Xerox ≫ Workcentre 7830i Firmware Version < 075.010.000.12010
   Xerox ≫ Workcentre 7830i Version -
Xerox ≫ Workcentre 7835i Firmware Version < 075.010.000.12010
   Xerox ≫ Workcentre 7835i Version -
Xerox ≫ Workcentre 7845i Firmware Version < 075.040.000.12010
   Xerox ≫ Workcentre 7845i Version -
Xerox ≫ Workcentre 7855i Firmware Version < 075.040.000.12010
   Xerox ≫ Workcentre 7855i Version -
Xerox ≫ Workcentre 7830 Firmware Version < 075.010.000.12010
   Xerox ≫ Workcentre 7830 Version -
Xerox ≫ Workcentre 7835 Firmware Version < 075.010.000.12010
   Xerox ≫ Workcentre 7835 Version -
Xerox ≫ Workcentre 7845 Firmware Version < 075.040.000.12010
   Xerox ≫ Workcentre 7845 Version -
Xerox ≫ Workcentre 7855 Firmware Version < 075.040.000.12010
   Xerox ≫ Workcentre 7855 Version -
Xerox ≫ Workcentre 7970 Firmware Version < 075.200.000.12010
   Xerox ≫ Workcentre 7970 Version -
Xerox ≫ Workcentre 7970i Firmware Version < 075.200.000.12010
   Xerox ≫ Workcentre 7970i Version -
Xerox ≫ Workcentre Ec7836 Firmware Version < 075.050.010.12010
   Xerox ≫ Workcentre Ec7836 Version -
Xerox ≫ Workcentre Ec7856 Firmware Version < 075.020.010.12010
   Xerox ≫ Workcentre Ec7856 Version -
Xerox ≫ Workcentre 5890i Firmware Version < 075.190.010.12010
   Xerox ≫ Workcentre 5890i Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.519
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf
Patch
Vendor Advisory