Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox WorkCentre / Phaser ausnutzen, um Informationen offenzulegen oder Daten zu manipulieren.
Product
Unter der Xerox WorkCentre Produktlinie sind Multifunktions Netzwerkdrucker zusammengefasst.
Vulnerabilities 2
-
High 7.6
SMB/FTP Address Book Scan Pass-back attack
With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.
-
Medium 6.7
LDAP Authentication Sever Pass-back attack
If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.
Revision history
-
#3
Neue Updates von XEROX aufgenommen
-
#2
Text angepasst
-
#1
Initiale Fassung
References
-
Xerox Security Bulletin vom 2025-02-03
https://security.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf
-
XEROX Security Advisory XRX25-008 vom 2025-04-21
https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/XRX25-003_Security-Bulletin-for-VersaLink-Phaser-and-WorkCentre.pdf