CVE-2020-36201
HIGHCVSS 7.5/10EPSS 0.80%
Last modified
CVE-2020-36201 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Workcentre 3655 Firmware | < 075.060.000.12010 |
| Xerox | Workcentre 3655i Firmware | < 075.060.000.12010 |
| Xerox | Workcentre 5865 Firmware | < 075.190.010.12010 |
| Xerox | Workcentre 5875 Firmware | < 075.190.010.12010 |
| Xerox | Workcentre 5890 Firmware | < 075.190.010.12010 |
| Xerox | Workcentre 5865i Firmware | < 075.190.010.12010 |
| Xerox | Workcentre 5875i Firmware | < 075.190.010.12010 |
| Xerox | Workcentre 5945 Firmware | < 075.091.010.12010 |
| Xerox | Workcentre 5955 Firmware | < 075.091.010.12010 |
| Xerox | Workcentre 5945i Firmware | < 075.091.010.12010 |
| Xerox | Workcentre 5955i Firmware | < 075.091.010.12010 |
| Xerox | Workcentre 6655 Firmware | < 075.110.010.12010 |
| Xerox | Workcentre 6655i Firmware | < 075.110.010.12010 |
| Xerox | Workcentre 7220 Firmware | < 075.030.000.12010 |
| Xerox | Workcentre 7225 Firmware | < 075.030.000.12010 |
| Xerox | Workcentre 7220i Firmware | < 075.030.000.12010 |
| Xerox | Workcentre 7225i Firmware | < 075.030.000.12010 |
| Xerox | Workcentre 7830i Firmware | < 075.010.000.12010 |
| Xerox | Workcentre 7835i Firmware | < 075.010.000.12010 |
| Xerox | Workcentre 7845i Firmware | < 075.040.000.12010 |
| Xerox | Workcentre 7855i Firmware | < 075.040.000.12010 |
| Xerox | Workcentre 7830 Firmware | < 075.010.000.12010 |
| Xerox | Workcentre 7835 Firmware | < 075.010.000.12010 |
| Xerox | Workcentre 7845 Firmware | < 075.040.000.12010 |
| Xerox | Workcentre 7855 Firmware | < 075.040.000.12010 |
| Xerox | Workcentre 7970 Firmware | < 075.200.000.12010 |
| Xerox | Workcentre 7970i Firmware | < 075.200.000.12010 |
| Xerox | Workcentre Ec7836 Firmware | < 075.050.010.12010 |
| Xerox | Workcentre Ec7856 Firmware | < 075.020.010.12010 |
| Xerox | Workcentre 5890i Firmware | < 075.190.010.12010 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-36201?
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.
How severe is CVE-2020-36201?
CVE-2020-36201 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.80% probability of exploitation in the next 30 days.
How do I fix CVE-2020-36201?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-36196A stored XSS vulnerability has been reported to affect QNAP …6.1
- CVE-2020-36197An improper access control vulnerability has been reported t…8.8
- CVE-2020-36198A command injection vulnerability has been reported to affec…6.7
- CVE-2020-36199TinyCheck before commits 9fd360d and ea53de8 was vulnerable …9.8
- CVE-2020-3620u'Lack of check of integer overflow while doing a round up o…5.5
- CVE-2020-36200TinyCheck before commits 9fd360d and ea53de8 allowed an auth…6.5
- CVE-2020-36202An issue was discovered in the async-h1 crate before 2.3.0 f…6.1
- CVE-2020-36203An issue was discovered in the reffers crate through 2020-12…4.7
- CVE-2020-36204An issue was discovered in the im crate through 2020-11-09 f…4.7
- CVE-2020-36205An issue was discovered in the xcb crate through 2020-12-10 …5.5
- CVE-2020-36206An issue was discovered in the rusb crate before 0.7.0 for R…7
- CVE-2020-36207An issue was discovered in the aovec crate through 2020-12-1…7
Are you affected by CVE-2020-36201?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST