What’s Vulnerable › Vulnerabilities

CVE-2024-12511: SMB/FTP Address Book Scan Pass-back attack

• Severity: high (CVSS 7.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-03 · updated 2026-06-17
• Weakness: CWE-306

Description

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

Affected products

• Xerox Phaser 6510: before 64.75.53 — fixed in 64.75.53
• Xerox Versalink B400: before 37.82.53 — fixed in 37.82.53
• Xerox Versalink B405: before 38.82.53 — fixed in 38.82.53
• Xerox Versalink B600/B610: before 32.82.53 — fixed in 32.82.53
• Xerox Versalink B605/B615: before 33.82.53 — fixed in 33.82.53
• Xerox Versalink B7025/B7030/B7035: before 58.75.53 — fixed in 58.75.53
• Xerox Versalink B7125/B7130/B7135: before 59.24.53 — fixed in 59.24.53
• Xerox Versalink C400: before 67.82.53 — fixed in 67.82.53
• Xerox Versalink C405: before 68.82.53 — fixed in 68.82.53
• Xerox Versalink C500/C600: before 61.82.53 — fixed in 61.82.53
• Xerox Versalink C505/C605: before 62.82.53 — fixed in 62.82.53
• Xerox Versalink C7000: before 56.75.53 — fixed in 56.75.53
• Xerox Versalink C7020/C7025/C7030: before 57.75.53 — fixed in 57.75.53
• Xerox Versalink C7120/C7125/C7130: before 69.24.53 — fixed in 69.24.53
• Xerox Versalink C8000/C9000: before 70.75.53 — fixed in 70.75.53
• Xerox Versalink C8000W: before 72.75.53 — fixed in 72.75.53
• Xerox WorkCentre 6515: before 65.75.53 — fixed in 65.75.53

How to fix

Upgrade to a fixed version: Xerox Phaser 6510 64.75.53; Xerox Versalink B400 37.82.53; Xerox Versalink B405 38.82.53; Xerox Versalink B600/B610 32.82.53; Xerox Versalink B605/B615 33.82.53; Xerox Versalink B7025/B7030/B7035 58.75.53; Xerox Versalink B7125/B7130/B7135 59.24.53; Xerox Versalink C400 67.82.53; Xerox Versalink C405 68.82.53; Xerox Versalink C500/C600 61.82.53; Xerox Versalink C505/C605 62.82.53; Xerox Versalink C7000 56.75.53. Check the vendor advisory for mitigations.

References

• https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf

Get alerted when CVE-2024-12511 or the next vulnerability affects your stack