Xerox Colorqube 8700/8900 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Xerox Colorqube 8700/8900, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2019-10880xeroxcolorqube_8700_firmware+6
EPSS score
8.47%
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.9.8CVE-2019-10881xeroxaltalink_b8045_firmware+27
EPSS score
0.99%
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.