VYPR

Versalink Firmware

by Xerox

CVEs (1)

  • CVE-2022-23968HigJan 26, 2022
    risk 0.49cvss 7.5epss 0.02

    Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing…