Strix
26.1K

CVE-2018-20768

UnknownEPSS 1.23%

Last modified

CVE-2018-20768 is a vulnerability of currently unknown severity. An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.. EPSS estimates a 1.23% chance of exploitation in the next 30 days.

Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.

Metrics

EPSS Probability
1.23%

65.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
XeroxWorkcentre 3655i Firmware< 073.060.048.15000
XeroxWorkcentre 3655 Firmware< 073.060.048.15000
XeroxWorkcentre 5890i Firmware< 073.190.048.15000
XeroxWorkcentre 5865i Firmware< 073.190.048.15000
XeroxWorkcentre 5875i Firmware< 073.190.048.15000
XeroxWorkcentre 5845 Firmware< 073.190.048.15000
XeroxWorkcentre 5865 Firmware< 073.190.048.15000
XeroxWorkcentre 5875 Firmware< 073.190.048.15000
XeroxWorkcentre 5890 Firmware< 073.190.048.15000
XeroxWorkcentre 5900 Firmware< 073.091.048.15000
XeroxWorkcentre 5900i Firmware< 073.091.048.15000
XeroxWorkcentre 6655 Firmware< 073.110.048.15000
XeroxWorkcentre 6655i Firmware< 073.110.048.15000
XeroxWorkcentre 7855 Firmware< 073.040.048.15000
XeroxWorkcentre 7225 Firmware< 073.030.048.15000
XeroxWorkcentre 7220 Firmware< 073.030.048.15000
XeroxWorkcentre 7220i Firmware< 073.030.048.15000
XeroxWorkcentre 7225i Firmware< 073.030.048.15000
XeroxWorkcentre 7855i Firmware< 073.040.048.15000
XeroxWorkcentre 7845i Firmware< 073.040.048.15000
XeroxWorkcentre 7835i Firmware< 073.010.048.15000
XeroxWorkcentre 7830i Firmware< 073.010.048.15000
XeroxWorkcentre 7830 Firmware< 073.010.048.15000
XeroxWorkcentre 7835 Firmware< 073.010.048.15000
XeroxWorkcentre 7845 Firmware< 073.040.048.15000
XeroxWorkcentre 7970 Firmware< 073.200.048.15000
XeroxWorkcentre 7970i Firmware< 073.200.048.15000
XeroxWorkcentre Ec7836 Firmware< 073.050.048.15000
XeroxWorkcentre Ec7856 Firmware< 073.020.048.15000

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-20768?
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.
How severe is CVE-2018-20768?
Severity scoring for CVE-2018-20768 is pending analysis. The EPSS model estimates a 1.23% probability of exploitation in the next 30 days.
How do I fix CVE-2018-20768?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-20768?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST