Command injection

2019-01-0303:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

CPENameOperatorVersion
altalink_b8045_firmwarelt100.008.028.05200
altalink_b8055_firmwarelt100.008.028.05200
altalink_b8065_firmwarelt100.008.028.05200
altalink_b8075_firmwarelt100.008.028.05200
altalink_b8090_firmwarelt100.008.028.05200
altalink_c8030_firmwarelt100.001.028.05200
altalink_c8035_firmwarelt100.001.028.05200
altalink_c8045_firmwarelt100.002.028.05200
altalink_c8055_firmwarelt100.002.028.05200
altalink_c8070_firmwarelt100.003.028.05200

Name	Operator	Version
altalink_b8045_firmware	lt	100.008.028.05200
altalink_b8055_firmware	lt	100.008.028.05200
altalink_b8065_firmware	lt	100.008.028.05200
altalink_b8075_firmware	lt	100.008.028.05200
altalink_b8090_firmware	lt	100.008.028.05200
altalink_c8030_firmware	lt	100.001.028.05200
altalink_c8035_firmware	lt	100.001.028.05200
altalink_c8045_firmware	lt	100.002.028.05200
altalink_c8055_firmware	lt	100.002.028.05200
altalink_c8070_firmware	lt	100.003.028.05200