CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before…

published March 29, 2021

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

🚨 If you’re using Xerox AltaLink models, this vulnerability could let unauthorized users delete files right off your disk! 😱 Think of it like a cafe where anyone can walk in and toss out any order from the kitchen without permission—absolutely chaotic! 🍽️ An attacker could exploit this flaw to remove important documents and files, potentially leading to loss of critical data and disrupting your operations. Imagine the panic of realizing vital files have vanished without a trace!

Put simply

Think of it like a cafe where anyone can walk in and toss out any order from the kitchen without permission—absolutely chaotic! 🍽️ This vulnerability allows unauthorized users to leverage the 'Scan To Mailbox' feature to delete arbitrary files from the printer's disk, effectively bypassing any security measures in place.

What to do

An attacker could exploit this flaw to remove important documents and files, potentially leading to loss of critical data and disrupting your operations. Imagine the panic of realizing vital files have vanished without a trace! To protect your system, update your Xerox AltaLink devices to versions 103.008.030.32000 for B8045/B8090, 103.001.030.32000 for C8030/C8035, 103.002.030.32000 for C8045/C8055, and 103.003.030.32000 for C8070. Ensure that only authorized users can access the 'Scan To Mailbox' feature and audit your user permissions regularly. You've got this! Follow these steps, and your Xerox devices will be secure in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01075 · 64.7th percentile
Published
2021-03-29T17:40Z
EPSS history
Timeline
  • 29 MAR 17:40Z
    Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before…
    cvelistv5