CVE-2020-36201: High severity xerox workcentre 3655i firmware vulnerability

Published Jan 21, 2021
·
Updated

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Affected Software

60 affected components
Xerox Workcentre 3655 Firmware<075.060.000.12010
Xerox WorkCentre 3655
Xerox Workcentre 3655i Firmware<075.060.000.12010
Xerox Workcentre 3655i
Xerox Workcentre 5865 Firmware<075.190.010.12010
Xerox Workcentre 5865
Xerox Workcentre 5875 Firmware<075.190.010.12010
Xerox Workcentre 5875
Xerox Workcentre 5890 Firmware<075.190.010.12010
Xerox Workcentre 5890
Xerox Workcentre 5865i Firmware<075.190.010.12010
Xerox Workcentre 5865i
Xerox Workcentre 5875i Firmware<075.190.010.12010
Xerox Workcentre 5875i
Xerox Workcentre 5945 Firmware<075.091.010.12010
Xerox Workcentre 5945
Xerox Workcentre 5955 Firmware<075.091.010.12010
Xerox Workcentre 5955
Xerox Workcentre 5945i Firmware<075.091.010.12010
Xerox Workcentre 5945i
Xerox Workcentre 5955i Firmware<075.091.010.12010
Xerox Workcentre 5955i
Xerox Workcentre 6655 Firmware<075.110.010.12010
Xerox Workcentre 6655
Xerox Workcentre 6655i Firmware<075.110.010.12010
Xerox Workcentre 6655i
Xerox Workcentre 7220 Firmware<075.030.000.12010
Xerox Workcentre 7220
Xerox Workcentre 7225 Firmware<075.030.000.12010
Xerox Workcentre 7225
Xerox Workcentre 7220i Firmware<075.030.000.12010
Xerox Workcentre 7220i
Xerox Workcentre 7225i Firmware<075.030.000.12010
Xerox Workcentre 7225i
Xerox Workcentre 7830i Firmware<075.010.000.12010
Xerox Workcentre 7830i
Xerox Workcentre 7835i Firmware<075.010.000.12010
Xerox Workcentre 7835i
Xerox Workcentre 7845i Firmware<075.040.000.12010
Xerox Workcentre 7845i
Xerox Workcentre 7855i Firmware<075.040.000.12010
Xerox Workcentre 7855i
Xerox Workcentre 7830 Firmware<075.010.000.12010
Xerox Workcentre 7830
Xerox Workcentre 7835 Firmware<075.010.000.12010
Xerox Workcentre 7835
Xerox Workcentre 7845 Firmware<075.040.000.12010
Xerox Workcentre 7845
Xerox Workcentre 7855 Firmware<075.040.000.12010
Xerox Workcentre 7855
Xerox Workcentre 7970 Firmware<075.200.000.12010
Xerox Workcentre 7970
Xerox Workcentre 7970i Firmware<075.200.000.12010
Xerox Workcentre 7970i
Xerox Workcentre Ec7836 Firmware<075.050.010.12010
Xerox WorkCentre EC7836
Xerox Workcentre Ec7856 Firmware<075.020.010.12010
Xerox Workcentre Ec7856
Xerox Workcentre 5890i Firmware<075.190.010.12010
Xerox Workcentre 5890i

Event History

Jan 21, 2021
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-36201?

CVE-2020-36201 has a severity rating that is categorized as an information exposure vulnerability due to insufficient password encryption.

2

How do I fix CVE-2020-36201?

To fix CVE-2020-36201, it is recommended to update the firmware of affected Xerox WorkCentre devices to the latest version that addresses this vulnerability.

3

What devices are affected by CVE-2020-36201?

CVE-2020-36201 affects various Xerox WorkCentre products including models 3655, 5865, 6655, 7970, and several others as listed in the vulnerability details.

4

Can CVE-2020-36201 lead to a security breach?

Yes, CVE-2020-36201 can potentially lead to a security breach by exposing sensitive passwords due to the lack of proper encryption.

5

Is CVE-2020-36201 a common vulnerability?

CVE-2020-36201 is considered a common vulnerability as it affects widely used Xerox products that are deployed in various organizations.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203