« Volver al listado

CVE-2022-23968

Estado: ModificadaAlta (7.5)—

Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Xerox — Versalink Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-23968",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-01-26T06:15:06.843",
  "references": [
    {
      "url": "https://neosmart.net/blog/2022/xerox-vulnerability-allows-unauthenticated-network-users-to-remotely-brick-printers/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://twitter.com/mqudsi/status/1485756915187695618",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://neosmart.net/blog/2022/xerox-vulnerability-allows-unauthenticated-network-users-to-remotely-brick-printers/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://twitter.com/mqudsi/status/1485756915187695618",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-835"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included \"believed to affect all previous and later versions as of the date of this posting\" but a 2022-01-26 vendor statement reports \"the latest versions of firmware are not vulnerable to this issue.\""
    },
    {
      "lang": "es",
      "value": "Los dispositivos Xerox VersaLink versiones hasta el 24-01-2022 permiten a atacantes remotos bloquear el dispositivo por medio de un archivo TIFF diseñado en una petición HTTP POST no autenticada. Se presenta una denegación de servicio permanente porque el análisis de imágenes causa un reinicio, pero el análisis de imágenes es reiniciado tan pronto como termina el proceso de arranque. Sin embargo, este bucle de arranque puede ser resuelto por un técnico de campo. El archivo TIFF debe tener un directorio de imágenes incompleto. Las versiones de firmware afectadas son xx.42.01 y xx.50.61"
    }
  ],
  "lastModified": "2026-06-17T04:31:04.110",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DC96F0E-C543-4E21-8C17-D45E3253F67D",
              "versionEndIncluding": "42.01"
            },
            {
              "criteria": "cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BD42729-E413-4251-9D48-149262FD345A",
              "versionEndIncluding": "50.61",
              "versionStartIncluding": "50.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5919C7E6-3005-4737-AAD3-A6531C605DC5"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2C631EF-0AA0-4D06-868D-099862B5550A"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1980B9F3-19AB-4815-8452-AE42821263ED"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AE6EA77E-C999-462B-9605-878940771608"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AE9FF2BE-5998-4795-8237-9111D47B7C18"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3A937272-E36B-420D-8407-D44C78ACEC65"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2112B6B-C983-4323-AAE5-364272C2C070"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EE1A0557-4A74-45F7-8B98-447454BF8A58"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "955EEB44-F267-4463-A7D0-462664EC0C85"
            },
            {
              "criteria": "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4297DF3C-E132-4300-B891-9732EE003C3D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}