peter bassill · operator
$ cve CVE-2018-20771 JSON

CVE-2018-20771

9.8
CRITICAL · CVSS 3.0 · EPSS 3.1% (pctl 87)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.08% — more likely to be exploited than 87% of all CVEs
WeaknessCWE-20
On CISA KEVno
Public exploitnone known
Published2019-02-10
Last modified2026-06-17

Affected (40)

VendorProduct
xeroxworkcentre 3655
xeroxworkcentre 3655 firmware
xeroxworkcentre 3655i
xeroxworkcentre 3655i firmware
xeroxworkcentre 5845
xeroxworkcentre 5845 firmware
xeroxworkcentre 5865
xeroxworkcentre 5865 firmware
xeroxworkcentre 5865i
xeroxworkcentre 5865i firmware
xeroxworkcentre 5875
xeroxworkcentre 5875 firmware
xeroxworkcentre 5875i
xeroxworkcentre 5875i firmware
xeroxworkcentre 5890
xeroxworkcentre 5890 firmware
xeroxworkcentre 5890i
xeroxworkcentre 5890i firmware
xeroxworkcentre 5900
xeroxworkcentre 5900 firmware
xeroxworkcentre 5900i
xeroxworkcentre 5900i firmware
xeroxworkcentre 6655
xeroxworkcentre 6655 firmware
xeroxworkcentre 6655i
xeroxworkcentre 6655i firmware
xeroxworkcentre 7220
xeroxworkcentre 7220 firmware
xeroxworkcentre 7220i
xeroxworkcentre 7220i firmware
xeroxworkcentre 7225
xeroxworkcentre 7225 firmware
xeroxworkcentre 7225i
xeroxworkcentre 7225i firmware
xeroxworkcentre 7845i
xeroxworkcentre 7845i firmware
xeroxworkcentre 7855
xeroxworkcentre 7855 firmware
xeroxworkcentre 7855i
xeroxworkcentre 7855i firmware

References

→ the Explorer  ·  watch your stack  ·  NVD