CVE-2021-28669

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
xeroxaltalink_b8045_firmware
𝑥
< 103.008.020.23120
xeroxaltalink_b8055_firmware
𝑥
< 103.008.020.23120
xeroxaltalink_b8065_firmware
𝑥
< 103.008.020.23120
xeroxaltalink_b8075_firmware
𝑥
< 103.008.020.23120
xeroxaltalink_b8090_firmware
𝑥
< 103.008.020.23120
xeroxaltalink_c8030_firmware
𝑥
< 103.001.020.23120
xeroxaltalink_c8035_firmware
𝑥
< 103.001.020.23120
xeroxaltalink_c8045_firmware
𝑥
< 103.002.020.23120
xeroxaltalink_c8055_firmware
𝑥
< 103.002.020.23120
xeroxaltalink_c8070_firmware
𝑥
< 103.003.020.23120
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf
https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf