GCVE - cpe:2.3:o:xerox:workcentre_6655_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:xerox:workcentre_6655_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Xerox (`d8e9b125-9300-56db-a245-db4fdb1eff41`)
Product	Workcentre 6655 Firmware (`65d9c6a2-34ad-509b-a1db-a3c718dc2d24`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-9330`	vulnerable	2026-06-08 05:27:21.192717	Details available Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices (e.g., by using default credentials) can change the LDAP connection IP address to a system owned by the actor without knowledge of the LDAP bind credentials. After changing the LDAP connection IP address, subsequent authentication attempts will result in the printer sending plaintext LDAP (Active Directory) credentials to the actor. Although the credentials may belong to a non-privileged user, organizations frequently use privileged service accounts to bind to Active Directory. The attacker gains a foothold on the Active Directory domain at a minimum, and may use the credentials to take over control of the Active Directory domain. This affects 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices. Published: 2020-02-21T22:47:12.000Z Updated: 2024-08-04T10:26:16.065Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2020/02/cert_Security_Mini_Bulletin_XRX20D_for_ConnectKey.pdf https://www.securicon.com/hackers-can-gain-active-directory-privileges-through-new-vulnerability-in-xerox-printers/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36201`	vulnerable	2026-06-08 05:25:02.770029	Details available An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices. Published: 2021-01-21T20:39:08.000Z Updated: 2024-08-04T17:23:09.507Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20771`	vulnerable	2026-06-08 05:11:27.899063	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-16T20:17:09.382Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20770`	vulnerable	2026-06-08 05:11:27.896049	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-16T23:01:16.483Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20769`	vulnerable	2026-06-08 05:11:27.893444	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-17T01:56:14.884Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20768`	vulnerable	2026-06-08 05:11:27.890414	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20767`	vulnerable	2026-06-08 05:11:27.867673	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11061`	vulnerable	2026-06-08 05:07:26.137593	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.