CVE-2019-10881

Default hidden Privileged Account Vulnerability in multiple XEROX devices

Published Apr 13, 2021 CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Description
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.

Remediation

Vendor Solution

No fix available for now.


Vendor Workaround

There no known workaround for now available.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-2603 Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
History

No history.