Lucene search
MitreCVE-2022-45897HistoryJan 31, 2023 - 12:15 a.m.
CVE-2022-45897
2023-01-3100:15:09
CWE-312
mitre
web.nvd.nist.gov
30
xerox
workcentre
3550
smb
server
settings
disclosure
cve-2022-45897
nvd
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
29.1%
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings.
Affected configurations
Node
xeroxworkcentre_3550Match-
xeroxworkcentre_3550_firmwareMatch25.003.03.000
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xerox | workcentre_3550 | - | cpe:2.3:h:xerox:workcentre_3550:-:*:*:*:*:*:*:* |
| xerox | workcentre_3550_firmware | 25.003.03.000 | cpe:2.3:o:xerox:workcentre_3550_firmware:25.003.03.000:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2022-45897
2023-01-31 00:15:09
openvas
openvas
Xerox WorkCentre 3550 <= 25.003.03.000 Information Disclosure Vulnerability
2023-02-01 00:00:00
cvelist
cvelist
CVE-2022-45897
2023-01-30 00:00:00
prion
prion
Cross site scripting
2023-01-31 00:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
29.1%
Related for CVE-2022-45897