Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."
References
| Link | Resource |
|---|---|
| https://neosmart.net/blog/2022/xerox-vulnerability-allows-unauthenticated-network-users-to-remotely-brick-printers/ | Exploit Third Party Advisory |
| https://twitter.com/mqudsi/status/1485756915187695618 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2022-01-26 06:15
Updated : 2024-02-28 18:48
NVD link : CVE-2022-23968
Mitre link : CVE-2022-23968
CVE.ORG link : CVE-2022-23968
JSON object : View
Products Affected
xerox
- versalink_b7030
- versalink_c400
- versalink_b610
- versalink_c600
- versalink_b400
- versalink_c8000
- versalink_c8000w
- versalink_b7035
- versalink_c7025
- versalink_c605
- versalink_firmware
- versalink_c9000
- versalink_c405
- versalink_c7000
- versalink_b405
- versalink_b7025
- versalink_c500
- versalink_c505
- versalink_c7030
- versalink_c7020
- versalink_b600
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')