9.1
CVE-2021-28670
- EPSS 0.96%
- Veröffentlicht 29.03.2021 18:15:13
- Zuletzt bearbeitet 21.11.2024 06:00:04
- Erkennungen
LoginXerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xerox ≫ Altalink B8045 Firmware Version < 103.008.020.23120
Xerox ≫ Altalink B8055 Firmware Version < 103.008.020.23120
Xerox ≫ Altalink B8065 Firmware Version < 103.008.020.23120
Xerox ≫ Altalink B8075 Firmware Version < 103.008.020.23120
Xerox ≫ Altalink B8090 Firmware Version < 103.008.020.23120
Xerox ≫ Altalink C8030 Firmware Version < 103.001.020.23120
Xerox ≫ Altalink C8035 Firmware Version < 103.001.020.23120
Xerox ≫ Altalink C8045 Firmware Version < 103.002.020.23120
Xerox ≫ Altalink C8055 Firmware Version < 103.002.020.23120
Xerox ≫ Altalink C8070 Firmware Version < 103.003.020.23120
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.96% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
| NIST | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:P
|
https://securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf