SMB/FTP Address Book Scan Pass-back attack
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.6epss 0.6%
exploitation probability
0.6%top 54% of all CVEs
observed exploitation
nono source reports it
With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected products
Xerox · Phaser 6510Xerox · Versalink B400Xerox · Versalink B405Xerox · Versalink B600/B610Xerox · Versalink B605/B615Xerox · Versalink B7025/B7030/B7035Xerox · Versalink B7125/B7130/B7135Xerox · Versalink C400Xerox · Versalink C405Xerox · Versalink C500/C600Xerox · Versalink C505/C605Xerox · Versalink C7000Xerox · Versalink C7020/C7025/C7030Xerox · Versalink C7120/C7125/C7130Xerox · Versalink C8000/C9000Xerox · Versalink C8000WXerox · WorkCentre 6515