Home

Description

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

PUBLISHED Reserved 2024-12-11 | Published 2025-02-03 | Updated 2025-09-17 | Assigner Xerox




HIGH: 7.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Problem types

CWE-306 Missing Authentication for Critical Function

CWE-522 Insufficiently Protected Credentials

Product status

Default status
unknown

Any version before 37.82.53
affected

Default status
unknown

Any version before 38.82.53
affected

Default status
unknown

Any version before 67.82.53
affected

Default status
unknown

Any version before 68.82.53
affected

Default status
unknown

Any version before 32.82.53
affected

Default status
unknown

Any version before 33.82.53
affected

Default status
unknown

Any version before 61.82.53
affected

Default status
unknown

Any version before 62.82.53
affected

Default status
unknown

Any version before 56.75.53
affected

Default status
unknown

Any version before 57.75.53
affected

Default status
unknown

Any version before 58.75.53
affected

Default status
unknown

Any version before 59.24.53
affected

Default status
unknown

Any version before 69.24.53
affected

Default status
unknown

Any version before 70.75.53
affected

Default status
unknown

Any version before 72.75.53
affected

Default status
unknown

Any version before 64.75.53
affected

Default status
unknown

Any version before 65.75.53
affected

References

securitydocs.business.xerox.com/...Phaser-and-WorkCentre.pdf

cve.org (CVE-2024-12511)

nvd.nist.gov (CVE-2024-12511)

Download JSON