CVE-2024-12511

—

CVSS 3.1

7.6 high

EPSS

<1%p47

Published

Feb 3, 2025 (Feb 3, 2025)

Modified

Jun 17, 2026

Description

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

Weakness: CWE-306, CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news3 stories

⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple’s Data Dilemma

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Data breach CVE-2018-0171 CVE-2025-24989 CVE-2025-23209+32 CVEs

Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers

Security AffairsFeb 18, 08:49 UTC · Feb 18, 2025Vulnerability CVE-2024-12511 CVE-2024-12510

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

The Hacker NewsFeb 18, 07:17 UTC · Feb 18, 2025Vulnerability CVE-2024-12510 CVE-2024-12511 CVE-2024-56735