CVE-2020-36201

EUVD-2020-23765
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
xeroxworkcentre_3655_firmware
𝑥
< 075.060.000.12010
xeroxworkcentre_3655i_firmware
𝑥
< 075.060.000.12010
xeroxworkcentre_5865_firmware
𝑥
< 075.190.010.12010
xeroxworkcentre_5875_firmware
𝑥
< 075.190.010.12010
xeroxworkcentre_5890_firmware
𝑥
< 075.190.010.12010
xeroxworkcentre_5865i_firmware
𝑥
< 075.190.010.12010
xeroxworkcentre_5875i_firmware
𝑥
< 075.190.010.12010
xeroxworkcentre_5945_firmware
𝑥
< 075.091.010.12010
xeroxworkcentre_5955_firmware
𝑥
< 075.091.010.12010
xeroxworkcentre_5945i_firmware
𝑥
< 075.091.010.12010
xeroxworkcentre_5955i_firmware
𝑥
< 075.091.010.12010
xeroxworkcentre_6655_firmware
𝑥
< 075.110.010.12010
xeroxworkcentre_6655i_firmware
𝑥
< 075.110.010.12010
xeroxworkcentre_7220_firmware
𝑥
< 075.030.000.12010
xeroxworkcentre_7225_firmware
𝑥
< 075.030.000.12010
xeroxworkcentre_7220i_firmware
𝑥
< 075.030.000.12010
xeroxworkcentre_7225i_firmware
𝑥
< 075.030.000.12010
xeroxworkcentre_7830i_firmware
𝑥
< 075.010.000.12010
xeroxworkcentre_7835i_firmware
𝑥
< 075.010.000.12010
xeroxworkcentre_7845i_firmware
𝑥
< 075.040.000.12010
xeroxworkcentre_7855i_firmware
𝑥
< 075.040.000.12010
xeroxworkcentre_7830_firmware
𝑥
< 075.010.000.12010
xeroxworkcentre_7835_firmware
𝑥
< 075.010.000.12010
xeroxworkcentre_7845_firmware
𝑥
< 075.040.000.12010
xeroxworkcentre_7855_firmware
𝑥
< 075.040.000.12010
xeroxworkcentre_7970_firmware
𝑥
< 075.200.000.12010
xeroxworkcentre_7970i_firmware
𝑥
< 075.200.000.12010
xeroxworkcentre_ec7836_firmware
𝑥
< 075.050.010.12010
xeroxworkcentre_ec7856_firmware
𝑥
< 075.020.010.12010
xeroxworkcentre_5890i_firmware
𝑥
< 075.190.010.12010
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf
https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf