Vulnerability Description
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Altalink B8045 Firmware | < 103.008.010.14010 |
| Xerox | Altalink B8045 | - |
| Xerox | Altalink B8055 Firmware | < 103.008.010.14010 |
| Xerox | Altalink B8055 | - |
| Xerox | Altalink B8065 Firmware | < 103.008.010.14010 |
| Xerox | Altalink B8065 | - |
| Xerox | Altalink B8075 Firmware | < 103.008.010.14010 |
| Xerox | Altalink B8075 | - |
| Xerox | Altalink B8090 Firmware | < 103.008.010.14010 |
| Xerox | Altalink B8090 | - |
| Xerox | Altalink C8030 Firmware | < 103.001.010.14010 |
| Xerox | Altalink C8030 | - |
| Xerox | Altalink C8035 Firmware | < 103.001.010.14010 |
| Xerox | Altalink C8035 | - |
| Xerox | Altalink C8045 Firmware | < 103.002.010.14010 |
| Xerox | Altalink C8045 | - |
| Xerox | Altalink C8055 Firmware | < 103.002.010.14010 |
| Xerox | Altalink C8055 | - |
| Xerox | Altalink C8070 Firmware | < 103.003.010.14010 |
| Xerox | Altalink C8070 | - |
Related Weaknesses (CWE)
References
- https://airbus-seclab.github.io/Third Party Advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_SecurityPatchVendor Advisory
- https://airbus-seclab.github.io/Third Party Advisory
FAQ
What is CVE-2019-10881?
CVE-2019-10881 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be e...
How severe is CVE-2019-10881?
CVE-2019-10881 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-10881?
Check the references section above for vendor advisories and patch information. Affected products include: Xerox Altalink B8045 Firmware, Xerox Altalink B8045, Xerox Altalink B8055 Firmware, Xerox Altalink B8055, Xerox Altalink B8065 Firmware.