CVE-2019-19832: CSRF
Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName value must have a unique name.)
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19832?
CVE-2019-19832 is a vulnerability that allows Cross-Site Request Forgery (CSRF) on Xerox AltaLink C8035 printers.
How severe is CVE-2019-19832?
CVE-2019-19832 has a severity rating of 8.8 (high).
How does CVE-2019-19832 work?
CVE-2019-19832 allows an attacker to make unauthorized requests to add users to the Device User Database on Xerox AltaLink C8035 printers through the xerox.set URI.
Which software is affected by CVE-2019-19832?
Xerox AltaLink C8035 printers with the Xerox Altalink C8035 Firmware are affected by CVE-2019-19832.
Is Xerox AltaLink C8035 vulnerable to CVE-2019-19832?
No, Xerox AltaLink C8035 printers themselves (hardware) are not vulnerable to CVE-2019-19832, but only the ones with the Xerox Altalink C8035 Firmware are.