CVE-2018-20768: Code Injection

Published Feb 10, 2019
·
Updated

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.

Affected Software

58 affected components
Xerox Workcentre 3655i Firmware<073.060.048.15000
Xerox Workcentre 3655i
Xerox Workcentre 3655 Firmware<073.060.048.15000
Xerox WorkCentre 3655
Xerox Workcentre 5890i Firmware<073.190.048.15000
Xerox Workcentre 5890i
Xerox Workcentre 5865i Firmware<073.190.048.15000
Xerox Workcentre 5865i
Xerox Workcentre 5875i Firmware<073.190.048.15000
Xerox Workcentre 5875i
Xerox Workcentre 5845 Firmware<073.190.048.15000
Xerox Workcentre 5845
Xerox Workcentre 5865 Firmware<073.190.048.15000
Xerox Workcentre 5865
Xerox Workcentre 5875 Firmware<073.190.048.15000
Xerox Workcentre 5875
Xerox Workcentre 5890 Firmware<073.190.048.15000
Xerox Workcentre 5890
Xerox Workcentre 5900 Firmware<073.091.048.15000
Xerox Workcentre 5900
Xerox Workcentre 5900i Firmware<073.091.048.15000
Xerox Workcentre 5900i
Xerox Workcentre 6655 Firmware<073.110.048.15000
Xerox Workcentre 6655
Xerox Workcentre 6655i Firmware<073.110.048.15000
Xerox Workcentre 6655i
Xerox Workcentre 7855 Firmware<073.040.048.15000
Xerox Workcentre 7855
Xerox Workcentre 7225 Firmware<073.030.048.15000
Xerox Workcentre 7225
Xerox Workcentre 7220 Firmware<073.030.048.15000
Xerox Workcentre 7220
Xerox Workcentre 7220i Firmware<073.030.048.15000
Xerox Workcentre 7220i
Xerox Workcentre 7225i Firmware<073.030.048.15000
Xerox Workcentre 7225i
Xerox Workcentre 7855i Firmware<073.040.048.15000
Xerox Workcentre 7855i
Xerox Workcentre 7845i Firmware<073.040.048.15000
Xerox Workcentre 7845i
Xerox Workcentre 7835i Firmware<073.010.048.15000
Xerox Workcentre 7835i
Xerox Workcentre 7830i Firmware<073.010.048.15000
Xerox Workcentre 7830i
Xerox Workcentre 7830 Firmware<073.010.048.15000
Xerox Workcentre 7830
Xerox Workcentre 7835 Firmware<073.010.048.15000
Xerox Workcentre 7835
Xerox Workcentre 7845 Firmware<073.040.048.15000
Xerox Workcentre 7845
Xerox Workcentre 7970 Firmware<073.200.048.15000
Xerox Workcentre 7970
Xerox Workcentre 7970i Firmware<073.200.048.15000
Xerox Workcentre 7970i
Xerox Workcentre Ec7836 Firmware<073.050.048.15000
Xerox WorkCentre EC7836
Xerox Workcentre Ec7856 Firmware<073.020.048.15000
Xerox Workcentre Ec7856

Event History

Feb 10, 2019
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-20768?

CVE-2018-20768 has a high severity rating due to the ability of an attacker to execute arbitrary PHP code.

2

How do I fix CVE-2018-20768?

To fix CVE-2018-20768, update the firmware of your affected Xerox WorkCentre device to version R18-05 073.xxx.0487.15000 or later.

3

Which devices are affected by CVE-2018-20768?

CVE-2018-20768 affects multiple Xerox WorkCentre models including 3655, 3685, 58XX series, 59XX series, and others prior to specific firmware updates.

4

What kind of attack is facilitated by CVE-2018-20768?

CVE-2018-20768 allows an attacker to write to a specific file leading to arbitrary code execution, posing a significant security risk.

5

Is there a public reference for CVE-2018-20768?

Yes, Xerox has released a mini bulletin detailing CVE-2018-20768 and necessary actions to mitigate the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203