high
7.5
CWE
327
Advisory Published
Updated

CVE-2020-36201

First published: Thu Jan 21 2021(Updated: )

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Xerox Workcentre 3655i Firmware<075.060.000.12010
Xerox WorkCentre 3655 Firmware
Xerox Workcentre 3655i Firmware<075.060.000.12010
Xerox Workcentre 3655i Firmware
Xerox Workcentre 5865 Firmware<075.190.010.12010
Xerox Workcentre 5865 Firmware
Xerox Workcentre 5875 Firmware<075.190.010.12010
Xerox Workcentre 5875 Firmware
Xerox Workcentre 5890i Firmware<075.190.010.12010
Xerox Workcentre 5890i Firmware
Xerox Workcentre 5865 Firmware<075.190.010.12010
Xerox Workcentre 5865
Xerox Workcentre 5875 Firmware<075.190.010.12010
Xerox Workcentre 5875 Firmware
Xerox Workcentre 5945i Firmware<075.091.010.12010
Xerox Workcentre 5945 Firmware
Xerox Workcentre 5955 Firmware<075.091.010.12010
Xerox Workcentre 5955i
Xerox Workcentre 5945 Firmware<075.091.010.12010
Xerox Workcentre 5945i Firmware
Xerox Workcentre 5955 Firmware<075.091.010.12010
Xerox Workcentre 5955i Firmware
Xerox Workcentre 6655i Firmware<075.110.010.12010
Xerox Workcentre 6655 Firmware
Xerox Workcentre 6655 Firmware<075.110.010.12010
Xerox Workcentre 6655 Firmware
Xerox Workcentre 7220 Firmware<075.030.000.12010
Xerox Workcentre 7220i Firmware
Xerox Workcentre 7225i Firmware<075.030.000.12010
Xerox Workcentre 7225i Firmware
Xerox Workcentre 7220 Firmware<075.030.000.12010
Xerox Workcentre 7220i Firmware
Xerox Workcentre 7225 Firmware<075.030.000.12010
Xerox Workcentre 7225i Firmware
Xerox Workcentre 7830i Firmware<075.010.000.12010
Xerox Workcentre 7830i Firmware
Xerox Workcentre 7835 Firmware<075.010.000.12010
Xerox Workcentre 7835i Firmware
Xerox Workcentre 7845i Firmware<075.040.000.12010
Xerox Workcentre 7845i Firmware
Xerox Workcentre 7855 Firmware<075.040.000.12010
Xerox Workcentre 7855i
Xerox Workcentre 7830 Firmware<075.010.000.12010
Xerox Workcentre 7830 Firmware
Xerox Workcentre 7835 Firmware<075.010.000.12010
Xerox Workcentre 7835i
Xerox Workcentre 7845i Firmware<075.040.000.12010
Xerox Workcentre 7845
Xerox Workcentre 7855i<075.040.000.12010
Xerox Workcentre 7855 Firmware
Xerox Workcentre 7970i Firmware<075.200.000.12010
Xerox Workcentre 7970i
Xerox Workcentre 7970 Firmware<075.200.000.12010
Xerox Workcentre 7970
Xerox Workcentre Ec7836 Firmware<075.050.010.12010
Xerox WorkCentre EC7836
Xerox Workcentre Ec7856 Firmware<075.020.010.12010
Xerox Workcentre Ec7856 Firmware
Xerox Workcentre 5890i Firmware<075.190.010.12010
Xerox Workcentre 5890i Firmware

Remedy

https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2020-36201?

    CVE-2020-36201 has a severity rating that is categorized as an information exposure vulnerability due to insufficient password encryption.

  • How do I fix CVE-2020-36201?

    To fix CVE-2020-36201, it is recommended to update the firmware of affected Xerox WorkCentre devices to the latest version that addresses this vulnerability.

  • What devices are affected by CVE-2020-36201?

    CVE-2020-36201 affects various Xerox WorkCentre products including models 3655, 5865, 6655, 7970, and several others as listed in the vulnerability details.

  • Can CVE-2020-36201 lead to a security breach?

    Yes, CVE-2020-36201 can potentially lead to a security breach by exposing sensitive passwords due to the lack of proper encryption.

  • Is CVE-2020-36201 a common vulnerability?

    CVE-2020-36201 is considered a common vulnerability as it affects widely used Xerox products that are deployed in various organizations.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203