synced 15 MIN AGO
01 Record

CVE-2019-10881

Default hidden Privileged Account Vulnerability in multiple XEROX devices

CriticalPUBLISHEDCNA: airbus
CNA base score9.4 CVSS v3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

02 Description

Default hidden Privileged Account Vulnerability in multiple XEROX devices

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
0.98% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 62.0% of scored records. A rank, not a probability.
NVD base score
9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2021-04-13 20:58Z5 YR AGO
Last updated
2024-08-04 22:32Z2 YR AGO
Reserved
2019-04-05
Assigning CNA
airbus
Record state
PUBLISHED
Severity
Critical (CVSS 9.4)
CNA CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Weaknesses
  • CWE-259Use of Hard-coded PasswordVariant
  • CWE-798Use of Hard-coded CredentialsBase
Data version
5.1
Document digest
e05e36c22577f2636c7d52043f5bb8f4bdbefb9e2866855b889e070f1ee9225d

05 Affected products

VendorProductVersionsPlatforms
XEROXWorkCentre 3655Not specified—
XEROXWorkCentre 5945/5955Not specified—
XEROXWorkCentre 6655Not specified—
XEROXWorkCentre 7220/7225Not specified—
XEROXWorkCentre 7830/7835/7845/7855Not specified—
XEROXWorkCentre 7970Not specified—
XEROXWorkCentre EC7836/EC7856Not specified—
XEROXColorQube 9301/9302/9303Not specified—
XEROXColorQube 8700/8900Not specified—
XEROXWorkCentre 6400Not specified—
XEROXPhaser 6700Not specified—
XEROXPhaser 7800Not specified—
XEROXWorkCentre 7755/7765/7775Not specified—

06 References

07 Remediation

No fix available for now.