1. Home
  2. CVE Database
  3. CVE-2018-17172
CRITICAL · 9.8

CVE-2018-17172

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthentica...

Vulnerability Description

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
XeroxAltalink C8030 Firmware< 100.001.028.05200
XeroxAltalink C8030-
XeroxAltalink C8035 Firmware< 100.001.028.05200
XeroxAltalink C8035-
XeroxAltalink C8045 Firmware< 100.002.028.05200
XeroxAltalink C8045-
XeroxAltalink C8055 Firmware< 100.002.028.05200
XeroxAltalink C8055-
XeroxAltalink C8070 Firmware< 100.003.028.05200
XeroxAltalink C8070-
XeroxAltalink B8045 Firmware< 100.008.028.05200
XeroxAltalink B8045-
XeroxAltalink B8055 Firmware< 100.008.028.05200
XeroxAltalink B8055-
XeroxAltalink B8065 Firmware< 100.008.028.05200
XeroxAltalink B8065-
XeroxAltalink B8075 Firmware< 100.008.028.05200
XeroxAltalink B8075-
XeroxAltalink B8090 Firmware< 100.008.028.05200
XeroxAltalink B8090-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2018-17172?

CVE-2018-17172 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthentica...

How severe is CVE-2018-17172?

CVE-2018-17172 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-17172?

Check the references section above for vendor advisories and patch information. Affected products include: Xerox Altalink C8030 Firmware, Xerox Altalink C8030, Xerox Altalink C8035 Firmware, Xerox Altalink C8035, Xerox Altalink C8045 Firmware.