CVE-2018-17172

—

CVSS 3.0

9.8 critical

EPSS

2%p79

Published

Jan 3, 2019 (Jan 3, 2019)

Modified

Jun 17, 2026

Description

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

Vendors: xerox
Products: altalink c8030 firmware, altalink c8035 firmware, altalink c8045 firmware, altalink c8055 firmware, altalink c8070 firmware, altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware, altalink b8075 firmware, altalink b8090 firmware
Weakness: CWE-77
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.