CVE-2019-18628

4.9 mediumEPSS 0.7%

Medium (4.9) in xerox. EPSS 0.7% chance of exploitation in the next 30 days.

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
Published: 2021-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xerox:altalink_b8045_firmware
xerox:altalink_b8055_firmware
xerox:altalink_b8065_firmware
xerox:altalink_b8075_firmware
xerox:altalink_b8090_firmware
xerox:altalink_c8030_firmware
xerox:altalink_c8035_firmware
xerox:altalink_c8045_firmware
xerox:altalink_c8055_firmware
xerox:altalink_c8070_firmware

References

Check your stack JSON