CVE-2018-20767

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-10 · updated 2026-06-17
Weakness: CWE-20

Description

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.

Affected products

Xerox Workcentre 3655 Firmware: before 073.060.048.15000 — fixed in 073.060.048.15000
Xerox Workcentre 3655I Firmware: before 073.060.048.15000 — fixed in 073.060.048.15000
Xerox Workcentre 5845 Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5865 Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5865I Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5875 Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5875I Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5890 Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5890I Firmware: before 073.190.048.15000 — fixed in 073.190.048.15000
Xerox Workcentre 5900 Firmware: before 073.091.048.15000 — fixed in 073.091.048.15000
Xerox Workcentre 5900I Firmware: before 073.091.048.15000 — fixed in 073.091.048.15000
Xerox Workcentre 6655 Firmware: before 073.110.048.15000 — fixed in 073.110.048.15000
Xerox Workcentre 6655I Firmware: before 073.110.048.15000 — fixed in 073.110.048.15000
Xerox Workcentre 7220 Firmware: before 073.030.048.15000 — fixed in 073.030.048.15000
Xerox Workcentre 7220I Firmware: before 073.030.048.15000 — fixed in 073.030.048.15000
Xerox Workcentre 7225 Firmware: before 073.030.048.15000 — fixed in 073.030.048.15000
Xerox Workcentre 7225I Firmware: before 073.030.048.15000 — fixed in 073.030.048.15000
Xerox Workcentre 7830 Firmware: before 073.010.048.15000 — fixed in 073.010.048.15000
Xerox Workcentre 7830I Firmware: before 073.010.048.15000 — fixed in 073.010.048.15000
Xerox Workcentre 7835 Firmware: before 073.010.048.15000 — fixed in 073.010.048.15000
Xerox Workcentre 7835I Firmware: before 073.010.048.15000 — fixed in 073.010.048.15000
Xerox Workcentre 7845 Firmware: before 073.040.048.15000 — fixed in 073.040.048.15000
Xerox Workcentre 7845I Firmware: before 073.040.048.15000 — fixed in 073.040.048.15000
Xerox Workcentre 7855 Firmware: before 073.040.048.15000 — fixed in 073.040.048.15000
Xerox Workcentre 7855I Firmware: before 073.040.048.15000 — fixed in 073.040.048.15000
Xerox Workcentre 7970 Firmware: before 073.200.048.15000 — fixed in 073.200.048.15000
Xerox Workcentre 7970I Firmware: before 073.200.048.15000 — fixed in 073.200.048.15000
Xerox Workcentre Ec7836 Firmware: before 073.050.048.15000 — fixed in 073.050.048.15000
Xerox Workcentre Ec7856 Firmware: before 073.020.048.15000 — fixed in 073.020.048.15000

How to fix

Upgrade to a fixed version: Xerox Workcentre 3655 Firmware 073.060.048.15000; Xerox Workcentre 3655I Firmware 073.060.048.15000; Xerox Workcentre 5845 Firmware 073.190.048.15000; Xerox Workcentre 5865 Firmware 073.190.048.15000; Xerox Workcentre 5865I Firmware 073.190.048.15000; Xerox Workcentre 5875 Firmware 073.190.048.15000; Xerox Workcentre 5875I Firmware 073.190.048.15000; Xerox Workcentre 5890 Firmware 073.190.048.15000; Xerox Workcentre 5890I Firmware 073.190.048.15000; Xerox Workcentre 5900 Firmware 073.091.048.15000; Xerox Workcentre 5900I Firmware 073.091.048.15000; Xerox Workcentre 6655 Firmware 073.110.048.15000. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-20767 or the next vulnerability affects your stack