Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-12510 EUVD-2024-50921GHSA-36fv-6vjc-jf92

LDAP Authentication Sever Pass-back attack

Published Feb 3, 2025 · Updated Feb 27, 2025 · Assigned by Xerox

Vendor: Xerox Product: Phaser 6510 Product: Versalink B400 Product: Versalink B405 Product: Versalink B600/B610 Product: Versalink B605/B615 Product: Versalink B7025/B7030/B7035 Product: Versalink B7125/B7130/B7135 Product: Versalink C400 Product: Versalink C405 Product: Versalink C500/C600 Product: Versalink C505/C605 Product: Versalink C7000 Product: Versalink C7020/C7025/C7030 Product: Versalink C7120/C7125/C7130 Product: Versalink C8000/C9000 Product: Versalink C8000W Product: WorkCentre 6515

Description

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

Affected products

VendorProductAffectedFixed
Xerox Versalink B400 < 37.82.53 37.82.53
Xerox Versalink B405 < 38.82.53 38.82.53
Xerox Versalink C400 < 67.82.53 67.82.53
Xerox Versalink C405 < 68.82.53 68.82.53
Xerox Versalink B600/B610 < 32.82.53 32.82.53
Xerox Versalink B605/B615 < 33.82.53 33.82.53
Xerox Versalink C500/C600 < 61.82.53 61.82.53
Xerox Versalink C505/C605 < 62.82.53 62.82.53
Xerox Versalink C7000 < 56.75.53 56.75.53
Xerox Versalink C7020/C7025/C7030 < 57.75.53 57.75.53
Xerox Versalink B7025/B7030/B7035 < 58.75.53 58.75.53
Xerox Versalink B7125/B7130/B7135 < 59.24.53 59.24.53
Xerox Versalink C7120/C7125/C7130 < 69.24.53 69.24.53
Xerox Versalink C8000/C9000 < 70.75.53 70.75.53
Xerox Versalink C8000W < 72.75.53 72.75.53
Xerox Phaser 6510 < 64.75.53 64.75.53
Xerox WorkCentre 6515 < 65.75.53 65.75.53

Advisories 1

References