High severity · published Jan 26, 2021
CVE-2020-36201
An issue was discovered in certain Xerox WorkCentre products
7.5
CVSS
0.8%
EPSS
No
On KEV
Description
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W3
Workcentre 3655 Firmware · Xerox
before 075.060.000.12010 · source: NVD
W3
Workcentre 3655i Firmware · Xerox
before 075.060.000.12010 · source: NVD
W5
Workcentre 5865 Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5865i Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5875 Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5875i Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5890 Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5890i Firmware · Xerox
before 075.190.010.12010 · source: NVD
W5
Workcentre 5945 Firmware · Xerox
before 075.091.010.12010 · source: NVD
W5
Workcentre 5945i Firmware · Xerox
before 075.091.010.12010 · source: NVD
W5
Workcentre 5955 Firmware · Xerox
before 075.091.010.12010 · source: NVD
W5
Workcentre 5955i Firmware · Xerox
before 075.091.010.12010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36201
Patch
https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf
More from Workcentre 3655 Firmware
9.8
CVE-2016-11061
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters…
9.8
CVE-2018-20768
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
9.8
CVE-2018-20770
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
9.8
CVE-2018-20771
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
8.8
CVE-2020-9330
Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address