1. Home
  2. CVE Database
  3. CVE-2018-20767
HIGH · 8.8

CVE-2018-20767

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. Ther...

Vulnerability Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
XeroxWorkcentre 3655I Firmware< 073.060.048.15000
XeroxWorkcentre 3655I-
XeroxWorkcentre 3655 Firmware< 073.060.048.15000
XeroxWorkcentre 3655-
XeroxWorkcentre 5890I Firmware< 073.190.048.15000
XeroxWorkcentre 5890I-
XeroxWorkcentre 5865I Firmware< 073.190.048.15000
XeroxWorkcentre 5865I-
XeroxWorkcentre 5875I Firmware< 073.190.048.15000
XeroxWorkcentre 5875I-
XeroxWorkcentre 5845 Firmware< 073.190.048.15000
XeroxWorkcentre 5845-
XeroxWorkcentre 5865 Firmware< 073.190.048.15000
XeroxWorkcentre 5865-
XeroxWorkcentre 5875 Firmware< 073.190.048.15000
XeroxWorkcentre 5875-
XeroxWorkcentre 5890 Firmware< 073.190.048.15000
XeroxWorkcentre 5890-
XeroxWorkcentre 5900 Firmware< 073.091.048.15000
XeroxWorkcentre 5900-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2018-20767?

CVE-2018-20767 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. Ther...

How severe is CVE-2018-20767?

CVE-2018-20767 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-20767?

Check the references section above for vendor advisories and patch information. Affected products include: Xerox Workcentre 3655I Firmware, Xerox Workcentre 3655I, Xerox Workcentre 3655 Firmware, Xerox Workcentre 3655, Xerox Workcentre 5890I Firmware.