CVE-2021-28672

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01…

published March 29, 2021

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

⚠️ A crafty buffer overflow in Xerox printers could let remote attackers pull off arbitrary code execution, like a mischievous barista pouring the wrong espresso in your favorite cup! ☕️ Think of it like a coffee shop that has a secret menu, but the barista doesn’t check if the customer knows the right order. If they just hear a request without validating it, they might whip up something totally unexpected. In the hands of an attacker, this could lead to a complete takeover of the printer, allowing them to execute any command they want! Imagine someone hijacking your printer to spew out unauthorized documents or even compromising your network security. It’s a recipe for chaos!

Put simply

Think of it like a coffee shop that has a secret menu, but the barista doesn’t check if the customer knows the right order. If they just hear a request without validating it, they might whip up something totally unexpected. This vulnerability arises from inadequate validation of parameters in the web interface of various Xerox printers, letting attackers exploit a buffer overflow to execute arbitrary code remotely.

What to do

In the hands of an attacker, this could lead to a complete takeover of the printer, allowing them to execute any command they want! Imagine someone hijacking your printer to spew out unauthorized documents or even compromising your network security. It’s a recipe for chaos! To secure your devices, update them to the latest firmware versions mentioned: 64.65.51/64.59.11 for the Phaser, 65.65.51/65.59.11 for the WorkCentre, and similar versions for the other models listed. Regularly check for updates to ensure ongoing protection against vulnerabilities. You've got this! Stay ahead of the game by patching these devices to keep your printing environment safe and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02236 · 82.7th percentile
Published
2021-03-29T20:06Z
EPSS history
Timeline
  • 29 MAR 20:06Z
    Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01…
    cvelistv5