CVE:CVE-2021-28672
CNNVD:CNNVD-202103-1586
Xerox Phaser 6510是美国Xerox公司的一个打印机。提供打印功能。
Xerox Phaser 存在安全漏洞，该漏洞允许远程攻击者通过Web页面参数处理中的缓冲区溢出来执行任意代码。以下产品及版本受到影响：Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51。
solution:Upgrade xerox phaser_6510_firmware to a higher version than 64.59.11,64.65.51,and avoid the version (,64.59.11),(,64.65.51); Upgrade xerox workcentre_6515_firmware to a higher version than 65.59.11,65.65.51,and avoid the version (,65.59.11),(,65.65.51); Upgrade xerox versalink_b400_firmware to a higher version than 37.59.01,37.65.51,and avoid the version (,37.59.01),(,37.65.51); Upgrade xerox versalink_b405_firmware to a higher version than 38.59.01,38.65.51,and avoid the version (,38.59.01),(,38.65.51); Upgrade xerox versalink_b600_firmware to a higher version than 32.59.01,32.65.51,and avoid the version (,32.59.01),(,32.65.51); Upgrade xerox versalink_b610_firmware to a higher version than 32.59.01,32.65.51,and avoid the version (,32.59.01),(,32.65.51); Upgrade xerox versalink_b605_firmware to a higher version than 33.59.01,33.65.51,and avoid the version (,33.59.01),(,33.65.51); Upgrade xerox versalink_b615_firmware to a higher version than 33.59.01,33.65.51,and avoid the version (,33.59.01),(,33.65.51); Upgrade xerox versalink_b7025_firmware to a higher version than 58.59.11,58.65.51,and avoid the version (,58.59.11),(,58.65.51); Upgrade xerox versalink_b7030_firmware to a higher version than 58.59.11,58.65.51,and avoid the version (,58.59.11),(,58.65.51); Upgrade xerox versalink_b7035_firmware to a higher version than 58.59.11,58.65.51,and avoid the version (,58.59.11),(,58.65.51); Upgrade xerox versalink_c400_firmware to a higher version than 67.59.01,67.65.51,and avoid the version (,67.59.01),(,67.65.51); Upgrade xerox versalink_c405_firmware to a higher version than 68.59.01,68.65.51,and avoid the version (,68.59.01),(,68.65.51); Upgrade xerox versalink_c500_firmware to a higher version than 61.59.01,61.65.51,and avoid the version (,61.59.01),(,61.65.51); Upgrade xerox versalink_c600_firmware to a higher version than 61.59.01,61.65.51,and avoid the version (,61.59.01),(,61.65.51); Upgrade xerox versalink_c505_firmware to a higher version than 62.59.01,62.65.51,and avoid the version (,62.59.01),(,62.65.51); Upgrade xerox versalink_c605_firmware to a higher version than 62.59.01,62.65.51,and avoid the version (,62.59.01),(,62.65.51); Upgrade xerox versalink_c7000_firmware to a higher version than 56.59.01,56.65.51,and avoid the version (,56.59.01),(,56.65.51); Upgrade xerox versalink_c7020_firmware to a higher version than 57.59.01,57.65.51,and avoid the version (,57.59.01),(,57.65.51); Upgrade xerox versalink_c7025_firmware to a higher version than 57.59.01,57.65.51,and avoid the version (,57.59.01),(,57.65.51); Upgrade xerox versalink_c7030_firmware to a higher version than 57.59.01,57.65.51,and avoid the version (,57.59.01),(,57.65.51); Upgrade xerox versalink_c8000_firmware to a higher version than 70.59.01,70.65.51,and avoid the version (,70.59.01),(,70.65.51); Upgrade xerox versalink_c9000_firmware to a higher version than 70.59.01,70.65.51,and avoid the version (,70.59.01),(,70.65.51); Upgrade xerox versalink_c8000w_firmware to a higher version than 72.65.51,and avoid the version (,72.65.51)