{"id":"CVE-2018-20767","aliases":["EUVD-2018-13310","GHSA-r364-xr2v-cwhw"],"status":"published","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02237,"percentile":0.82948,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-02-10T17:00:00Z","modified":"2026-06-17T01:53:25Z","products":[{"vendor":"xerox","product":"workcentre_3655_firmware"},{"vendor":"xerox","product":"workcentre_3655i_firmware"},{"vendor":"xerox","product":"workcentre_5845_firmware"},{"vendor":"xerox","product":"workcentre_5865_firmware"},{"vendor":"xerox","product":"workcentre_5865i_firmware"},{"vendor":"xerox","product":"workcentre_5875_firmware"},{"vendor":"xerox","product":"workcentre_5875i_firmware"},{"vendor":"xerox","product":"workcentre_5890_firmware"},{"vendor":"xerox","product":"workcentre_5890i_firmware"},{"vendor":"xerox","product":"workcentre_5900_firmware"},{"vendor":"xerox","product":"workcentre_5900i_firmware"},{"vendor":"xerox","product":"workcentre_6655_firmware"},{"vendor":"xerox","product":"workcentre_6655i_firmware"},{"vendor":"xerox","product":"workcentre_7220_firmware"},{"vendor":"xerox","product":"workcentre_7220i_firmware"},{"vendor":"xerox","product":"workcentre_7225_firmware"},{"vendor":"xerox","product":"workcentre_7225i_firmware"},{"vendor":"xerox","product":"workcentre_7830_firmware"},{"vendor":"xerox","product":"workcentre_7830i_firmware"},{"vendor":"xerox","product":"workcentre_7835_firmware"},{"vendor":"xerox","product":"workcentre_7835i_firmware"},{"vendor":"xerox","product":"workcentre_7845_firmware"},{"vendor":"xerox","product":"workcentre_7845i_firmware"},{"vendor":"xerox","product":"workcentre_7855_firmware"},{"vendor":"xerox","product":"workcentre_7855i_firmware"},{"vendor":"xerox","product":"workcentre_7970_firmware"},{"vendor":"xerox","product":"workcentre_7970i_firmware"},{"vendor":"xerox","product":"workcentre_ec7836_firmware"},{"vendor":"xerox","product":"workcentre_ec7856_firmware"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20767"},{"url":"https://github.com/advisories/GHSA-r364-xr2v-cwhw"}],"sources":{"cve":[{"id":"CVE-2018-20767","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T03:22:29.571Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-13310","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T03:22:29Z","updated_at":"2026-11-03T00:28:32.482778Z"}],"ghsa":[{"id":"GHSA-r364-xr2v-cwhw","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.","status":"published","published":"2022-05-14T01:34:21Z","modified":"2023-02-02T05:04:04Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:46.878809Z"}],"nvd":[{"id":"CVE-2018-20767","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.","status":"published","published":"2019-02-10T17:29:00.247Z","modified":"2026-06-17T01:53:25.75Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:53.728218Z"}]}}