CVE-2021-37354

Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow lurks in the Xerox Phaser 4622! It could lead to a Denial of Service (DoS) when the TIMEZONE variable is mismanaged — meaning your printer might just take a holiday! ✈️ Think of the buffer overflow like overloading a toy box with too many toys — once it's filled past capacity, the lid pops off, and everything spills out. In this case, the printer's functionality could spill over into a full-blown outage! An attacker could exploit this vulnerability to crash the printer, rendering it unavailable for everyone and causing chaos in your printing operations. Imagine a busy office suddenly unable to print important documents! That's a recipe for frustration and lost productivity.

Put simply

Think of the buffer overflow like overloading a toy box with too many toys — once it's filled past capacity, the lid pops off, and everything spills out. In this case, the printer's functionality could spill over into a full-blown outage! This vulnerability arises from a buffer overflow in the function sub_3226AC triggered by improper handling of overflow data in the TIMEZONE variable. When exploited, it can crash the service, leading to denial of access for legitimate users.

What to do

An attacker could exploit this vulnerability to crash the printer, rendering it unavailable for everyone and causing chaos in your printing operations. Imagine a busy office suddenly unable to print important documents! That's a recipe for frustration and lost productivity. To mitigate this risk, update the Xerox Phaser 4622 to the latest firmware version as soon as it's available. Regularly monitor printer configurations to ensure no unexpected settings are in place, and limit access to trusted personnel only. 🛡️ You've got this! With a few quick updates, your printer will be back to its reliable self in no time! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01375 · 71.8th percentile
Published
2022-02-15T19:08Z
EPSS history
Timeline
  • 15 FEB 19:08Z
    Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable
    cvelistv5