What’s Vulnerable › Vulnerabilities

CVE-2018-17172

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-01-03 · updated 2026-06-17
• Weakness: CWE-77

Description

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection.

Affected products

• Xerox Altalink B8045 Firmware: before 100.008.028.05200 — fixed in 100.008.028.05200
• Xerox Altalink B8055 Firmware: before 100.008.028.05200 — fixed in 100.008.028.05200
• Xerox Altalink B8065 Firmware: before 100.008.028.05200 — fixed in 100.008.028.05200
• Xerox Altalink B8075 Firmware: before 100.008.028.05200 — fixed in 100.008.028.05200
• Xerox Altalink B8090 Firmware: before 100.008.028.05200 — fixed in 100.008.028.05200
• Xerox Altalink C8030 Firmware: before 100.001.028.05200 — fixed in 100.001.028.05200
• Xerox Altalink C8035 Firmware: before 100.001.028.05200 — fixed in 100.001.028.05200
• Xerox Altalink C8045 Firmware: before 100.002.028.05200 — fixed in 100.002.028.05200
• Xerox Altalink C8055 Firmware: before 100.002.028.05200 — fixed in 100.002.028.05200
• Xerox Altalink C8070 Firmware: before 100.003.028.05200 — fixed in 100.003.028.05200

How to fix

Upgrade to a fixed version: Xerox Altalink B8045 Firmware 100.008.028.05200; Xerox Altalink B8055 Firmware 100.008.028.05200; Xerox Altalink B8065 Firmware 100.008.028.05200; Xerox Altalink B8075 Firmware 100.008.028.05200; Xerox Altalink B8090 Firmware 100.008.028.05200; Xerox Altalink C8030 Firmware 100.001.028.05200; Xerox Altalink C8035 Firmware 100.001.028.05200; Xerox Altalink C8045 Firmware 100.002.028.05200; Xerox Altalink C8055 Firmware 100.002.028.05200; Xerox Altalink C8070 Firmware 100.003.028.05200. Check the vendor advisory for mitigations.

References

• https://securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdf
• https://securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdf

Get alerted when CVE-2018-17172 or the next vulnerability affects your stack