Vulnerability Description
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Altalink B8045 Firmware | < 103.008.020.23120 |
| Xerox | Altalink B8045 | - |
| Xerox | Altalink B8055 Firmware | < 103.008.020.23120 |
| Xerox | Altalink B8055 | - |
| Xerox | Altalink B8065 Firmware | < 103.008.020.23120 |
| Xerox | Altalink B8065 | - |
| Xerox | Altalink B8075 Firmware | < 103.008.020.23120 |
| Xerox | Altalink B8075 | - |
| Xerox | Altalink B8090 Firmware | < 103.008.020.23120 |
| Xerox | Altalink B8090 | - |
| Xerox | Altalink C8030 Firmware | < 103.001.020.23120 |
| Xerox | Altalink C8030 | - |
| Xerox | Altalink C8035 Firmware | < 103.001.020.23120 |
| Xerox | Altalink C8035 | - |
| Xerox | Altalink C8045 Firmware | < 103.002.020.23120 |
| Xerox | Altalink C8045 | - |
| Xerox | Altalink C8055 Firmware | < 103.002.020.23120 |
| Xerox | Altalink C8055 | - |
| Xerox | Altalink C8070 Firmware | < 103.003.020.23120 |
| Xerox | Altalink C8070 | - |
Related Weaknesses (CWE)
References
- https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_SecurityPatchVendor Advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_SecurityPatchVendor Advisory
FAQ
What is CVE-2021-28669?
CVE-2021-28669 is a vulnerability with a CVSS score of 7.5 (HIGH). Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration at...
How severe is CVE-2021-28669?
CVE-2021-28669 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-28669?
Check the references section above for vendor advisories and patch information. Affected products include: Xerox Altalink B8045 Firmware, Xerox Altalink B8045, Xerox Altalink B8055 Firmware, Xerox Altalink B8055, Xerox Altalink B8065 Firmware.