CVE-2020-36201

Name: CVE-2020-36201
Creator: NVD / NIST
Published: 2021-01-26T18:15:55.443+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 0.80%

Last modified Jun 17, 2026

CVE-2020-36201 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. EPSS estimates a 0.80% chance of exploitation in the next 30 days.

Description

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

0.80%

52.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-327

Affected Software

Vendor	Product	Versions
Xerox	Workcentre 3655 Firmware	< 075.060.000.12010
Xerox	Workcentre 3655i Firmware	< 075.060.000.12010
Xerox	Workcentre 5865 Firmware	< 075.190.010.12010
Xerox	Workcentre 5875 Firmware	< 075.190.010.12010
Xerox	Workcentre 5890 Firmware	< 075.190.010.12010
Xerox	Workcentre 5865i Firmware	< 075.190.010.12010
Xerox	Workcentre 5875i Firmware	< 075.190.010.12010
Xerox	Workcentre 5945 Firmware	< 075.091.010.12010
Xerox	Workcentre 5955 Firmware	< 075.091.010.12010
Xerox	Workcentre 5945i Firmware	< 075.091.010.12010
Xerox	Workcentre 5955i Firmware	< 075.091.010.12010
Xerox	Workcentre 6655 Firmware	< 075.110.010.12010
Xerox	Workcentre 6655i Firmware	< 075.110.010.12010
Xerox	Workcentre 7220 Firmware	< 075.030.000.12010
Xerox	Workcentre 7225 Firmware	< 075.030.000.12010
Xerox	Workcentre 7220i Firmware	< 075.030.000.12010
Xerox	Workcentre 7225i Firmware	< 075.030.000.12010
Xerox	Workcentre 7830i Firmware	< 075.010.000.12010
Xerox	Workcentre 7835i Firmware	< 075.010.000.12010
Xerox	Workcentre 7845i Firmware	< 075.040.000.12010
Xerox	Workcentre 7855i Firmware	< 075.040.000.12010
Xerox	Workcentre 7830 Firmware	< 075.010.000.12010
Xerox	Workcentre 7835 Firmware	< 075.010.000.12010
Xerox	Workcentre 7845 Firmware	< 075.040.000.12010
Xerox	Workcentre 7855 Firmware	< 075.040.000.12010
Xerox	Workcentre 7970 Firmware	< 075.200.000.12010
Xerox	Workcentre 7970i Firmware	< 075.200.000.12010
Xerox	Workcentre Ec7836 Firmware	< 075.050.010.12010
Xerox	Workcentre Ec7856 Firmware	< 075.020.010.12010
Xerox	Workcentre 5890i Firmware	< 075.190.010.12010

References

https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdfPatch, Vendor Advisory
https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdfPatch, Vendor Advisory

Timeline

Published: Jan 26, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-36201?

How severe is CVE-2020-36201?

CVE-2020-36201 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.80% probability of exploitation in the next 30 days.

How do I fix CVE-2020-36201?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-36201?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST