Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-28669: Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration...

CVE-2021-28669 · published 5 years ago

Summary

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights.

What to do

Update xerox altalink_b8045_firmware to version 103.008.020.23120 or later.
Update xerox altalink_b8055_firmware to version 103.008.020.23120 or later.
Update xerox altalink_b8065_firmware to version 103.008.020.23120 or later.
Update xerox altalink_b8075_firmware to version 103.008.020.23120 or later.
Update xerox altalink_b8090_firmware to version 103.008.020.23120 or later.
Update xerox altalink_c8030_firmware to version 103.001.020.23120 or later.
Update xerox altalink_c8035_firmware to version 103.001.020.23120 or later.
Update xerox altalink_c8045_firmware to version 103.002.020.23120 or later.
Update xerox altalink_c8055_firmware to version 103.002.020.23120 or later.
Update xerox altalink_c8070_firmware to version 103.003.020.23120 or later.

Affected software

Vendor	Product	Affected versions
xerox	altalink_b8045_firmware	< 103.008.020.23120 `cpe:2.3:o:xerox:altalink_b8045_firmware::::::::`
xerox	altalink_b8055_firmware	< 103.008.020.23120 `cpe:2.3:o:xerox:altalink_b8055_firmware::::::::`
xerox	altalink_b8065_firmware	< 103.008.020.23120 `cpe:2.3:o:xerox:altalink_b8065_firmware::::::::`
xerox	altalink_b8075_firmware	< 103.008.020.23120 `cpe:2.3:o:xerox:altalink_b8075_firmware::::::::`
xerox	altalink_b8090_firmware	< 103.008.020.23120 `cpe:2.3:o:xerox:altalink_b8090_firmware::::::::`
xerox	altalink_c8030_firmware	< 103.001.020.23120 `cpe:2.3:o:xerox:altalink_c8030_firmware::::::::`
xerox	altalink_c8035_firmware	< 103.001.020.23120 `cpe:2.3:o:xerox:altalink_c8035_firmware::::::::`
xerox	altalink_c8045_firmware	< 103.002.020.23120 `cpe:2.3:o:xerox:altalink_c8045_firmware::::::::`
xerox	altalink_c8055_firmware	< 103.002.020.23120 `cpe:2.3:o:xerox:altalink_c8055_firmware::::::::`
xerox	altalink_c8070_firmware	< 103.003.020.23120 `cpe:2.3:o:xerox:altalink_c8070_firmware::::::::`

Original advisory text

References

https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security... Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-862Missing Authorization

Timeline

Published29 Mar 2021

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-28669 · NVD

Track software like this

Free during beta