CVE-2018-20771: Input Validation

Published Feb 10, 2019
·
Updated

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.

Affected Software

58 affected components
Xerox Workcentre 3655i Firmware<073.060.048.15000
Xerox Workcentre 3655i
Xerox Workcentre 3655 Firmware<073.060.048.15000
Xerox WorkCentre 3655
Xerox Workcentre 5890i Firmware<073.190.048.15000
Xerox Workcentre 5890i
Xerox Workcentre 5865i Firmware<073.190.048.15000
Xerox Workcentre 5865i
Xerox Workcentre 5875i Firmware<073.190.048.15000
Xerox Workcentre 5875i
Xerox Workcentre 5845 Firmware<073.190.048.15000
Xerox Workcentre 5845
Xerox Workcentre 5865 Firmware<073.190.048.15000
Xerox Workcentre 5865
Xerox Workcentre 5875 Firmware<073.190.048.15000
Xerox Workcentre 5875
Xerox Workcentre 5890 Firmware<073.190.048.15000
Xerox Workcentre 5890
Xerox Workcentre 5900 Firmware<073.091.048.15000
Xerox Workcentre 5900
Xerox Workcentre 5900i Firmware<073.091.048.15000
Xerox Workcentre 5900i
Xerox Workcentre 6655 Firmware<073.110.048.15000
Xerox Workcentre 6655
Xerox Workcentre 6655i Firmware<073.110.048.15000
Xerox Workcentre 6655i
Xerox Workcentre 7855 Firmware<073.040.048.15000
Xerox Workcentre 7855
Xerox Workcentre 7225 Firmware<073.030.048.15000
Xerox Workcentre 7225
Xerox Workcentre 7220 Firmware<073.030.048.15000
Xerox Workcentre 7220
Xerox Workcentre 7220i Firmware<073.030.048.15000
Xerox Workcentre 7220i
Xerox Workcentre 7225i Firmware<073.030.048.15000
Xerox Workcentre 7225i
Xerox Workcentre 7855i Firmware<073.040.048.15000
Xerox Workcentre 7855i
Xerox Workcentre 7845i Firmware<073.040.048.15000
Xerox Workcentre 7845i
Xerox Workcentre 7835i Firmware<073.010.048.15000
Xerox Workcentre 7835i
Xerox Workcentre 7830i Firmware<073.010.048.15000
Xerox Workcentre 7830i
Xerox Workcentre 7830 Firmware<073.010.048.15000
Xerox Workcentre 7830
Xerox Workcentre 7835 Firmware<073.010.048.15000
Xerox Workcentre 7835
Xerox Workcentre 7845 Firmware<073.040.048.15000
Xerox Workcentre 7845
Xerox Workcentre 7970 Firmware<073.200.048.15000
Xerox Workcentre 7970
Xerox Workcentre 7970i Firmware<073.200.048.15000
Xerox Workcentre 7970i
Xerox Workcentre Ec7836 Firmware<073.050.048.15000
Xerox WorkCentre EC7836
Xerox Workcentre Ec7856 Firmware<073.020.048.15000
Xerox Workcentre Ec7856

Event History

Feb 10, 2019
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2018-20771?

CVE-2018-20771 is classified as a critical vulnerability due to its potential for unauthenticated remote command execution.

2

How do I fix CVE-2018-20771?

To fix CVE-2018-20771, update the device firmware to version R18-05 073.xxx.0487.15000 or later.

3

Which Xerox devices are affected by CVE-2018-20771?

CVE-2018-20771 affects several Xerox devices, including WorkCentre 3655, 3655i, and various models in the 58XX, 59XX, and 7000 series.

4

Is any action needed if my Xerox device is on a firmware version higher than R18-05 073.xxx.0487.15000 regarding CVE-2018-20771?

If your Xerox device is on a firmware version higher than R18-05 073.xxx.0487.15000, it is not affected by CVE-2018-20771.

5

What type of vulnerability is CVE-2018-20771?

CVE-2018-20771 is a vulnerability that allows unauthenticated remote command execution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203