Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior
Críticas / altas1424▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.80% | — | Xerox Workcentre 3655 FirmwareXerox Workcentre 3655i FirmwareXerox Workcentre 5865 FirmwareXerox Workcentre 5875 Firmware+26 | 26/1/2021 | 17/6/2026 | An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices. | |
| Modificada | Crítica (9.8) | 2.0% | — | Xerox Workcentre 3655 FirmwareXerox Workcentre 3655i FirmwareXerox Workcentre 5865 FirmwareXerox Workcentre 5875 Firmware+21 | 29/4/2020 | 17/6/2026 | Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device. | |
| Modificada | Crítica (9.8) | 3.1% | — | Xerox Workcentre 3655i FirmwareXerox Workcentre 3655 FirmwareXerox Workcentre 5890i FirmwareXerox Workcentre 5865i Firmware+25 | 10/2/2019 | 17/6/2026 | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution. | |
| Modificada | Crítica (9.8) | 1.1% | — | Xerox Workcentre 3655i FirmwareXerox Workcentre 3655 FirmwareXerox Workcentre 5890i FirmwareXerox Workcentre 5865i Firmware+25 | 10/2/2019 | 17/6/2026 | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection. | |
| Modificada | Alta (7.5) | 1.4% | — | Xerox Workcentre 3655i FirmwareXerox Workcentre 3655 FirmwareXerox Workcentre 5890i FirmwareXerox Workcentre 5865i Firmware+25 | 10/2/2019 | 17/6/2026 | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability. | |
| Modificada | Crítica (9.8) | 1.2% | — | Xerox Workcentre 3655i FirmwareXerox Workcentre 3655 FirmwareXerox Workcentre 5890i FirmwareXerox Workcentre 5865i Firmware+25 | 10/2/2019 | 17/6/2026 | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file. | |
| Modificada | Alta (8.8) | 2.2% | — | Xerox Workcentre 3655i FirmwareXerox Workcentre 3655 FirmwareXerox Workcentre 5890i FirmwareXerox Workcentre 5865i Firmware+25 | 10/2/2019 | 17/6/2026 | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution. |