Critical severity9.8NVD Advisory· Published Jan 3, 2019· Updated Jun 17, 2026

CVE-2018-17172

Description

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

Affected products

Xerox/Altalink B8045 Firmware
cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*
Range: <100.008.028.05200
Xerox/Altalink B8055 Firmware
cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*
Range: <100.008.028.05200
Xerox/Altalink B8065 Firmware
cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*
Range: <100.008.028.05200
Xerox/Altalink B8075 Firmware
cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*
Range: <100.008.028.05200
Xerox/Altalink B8090 Firmware
cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*
Range: <100.008.028.05200
Xerox/Altalink C8030 Firmware
cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*
Range: <100.001.028.05200
Xerox/Altalink C8035 Firmware
cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*
Range: <100.001.028.05200
Xerox/Altalink C8045 Firmware
cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*
Range: <100.002.028.05200
Xerox/Altalink C8055 Firmware
cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*
Range: <100.002.028.05200
Xerox/Altalink C8070 Firmware
cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*
Range: <100.003.028.05200
Xerox/AltaLink B80xxllm-fuzzy
Range: <100.008.028.05200
Xerox/C8030/C8035llm-fuzzy
Range: <100.001.028.05200
Xerox/C8045/C8055llm-fuzzy
Range: <100.002.028.05200
Xerox/C8070llm-fuzzy
Range: <100.003.028.05200

Patches

Vulnerability mechanics

References

securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000