Skip to content
OpenAdvisories
High · 7.6 CVE-2024-12511 EUVD-2024-50922GHSA-33gq-q699-4w29

SMB/FTP Address Book Scan Pass-back attack

Published Feb 3, 2025 · Updated Sep 17, 2025 · Assigned by Xerox

Vendor: Xerox Product: Phaser 6510 Product: Versalink B400 Product: Versalink B405 Product: Versalink B600/B610 Product: Versalink B605/B615 Product: Versalink B7025/B7030/B7035 Product: Versalink B7125/B7130/B7135 Product: Versalink C400 Product: Versalink C405 Product: Versalink C500/C600 Product: Versalink C505/C605 Product: Versalink C7000 Product: Versalink C7020/C7025/C7030 Product: Versalink C7120/C7125/C7130 Product: Versalink C8000/C9000 Product: Versalink C8000W Product: WorkCentre 6515

Description

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

Affected products

VendorProductAffectedFixed
Xerox Versalink B400 < 37.82.53 37.82.53
Xerox Versalink B405 < 38.82.53 38.82.53
Xerox Versalink C400 < 67.82.53 67.82.53
Xerox Versalink C405 < 68.82.53 68.82.53
Xerox Versalink B600/B610 < 32.82.53 32.82.53
Xerox Versalink B605/B615 < 33.82.53 33.82.53
Xerox Versalink C500/C600 < 61.82.53 61.82.53
Xerox Versalink C505/C605 < 62.82.53 62.82.53
Xerox Versalink C7000 < 56.75.53 56.75.53
Xerox Versalink C7020/C7025/C7030 < 57.75.53 57.75.53
Xerox Versalink B7025/B7030/B7035 < 58.75.53 58.75.53
Xerox Versalink B7125/B7130/B7135 < 59.24.53 59.24.53
Xerox Versalink C7120/C7125/C7130 < 69.24.53 69.24.53
Xerox Versalink C8000/C9000 < 70.75.53 70.75.53
Xerox Versalink C8000W < 72.75.53 72.75.53
Xerox Phaser 6510 < 64.75.53 64.75.53
Xerox WorkCentre 6515 < 65.75.53 65.75.53

Advisories 1

References