{"id":"CVE-2018-20768","aliases":["EUVD-2018-13311","GHSA-phqx-688p-m9x2"],"status":"published","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01235,"percentile":0.69286,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2019-02-10T17:00:00Z","modified":"2026-06-17T01:53:25Z","products":[{"vendor":"xerox","product":"workcentre_3655_firmware"},{"vendor":"xerox","product":"workcentre_3655i_firmware"},{"vendor":"xerox","product":"workcentre_5845_firmware"},{"vendor":"xerox","product":"workcentre_5865_firmware"},{"vendor":"xerox","product":"workcentre_5865i_firmware"},{"vendor":"xerox","product":"workcentre_5875_firmware"},{"vendor":"xerox","product":"workcentre_5875i_firmware"},{"vendor":"xerox","product":"workcentre_5890_firmware"},{"vendor":"xerox","product":"workcentre_5890i_firmware"},{"vendor":"xerox","product":"workcentre_5900_firmware"},{"vendor":"xerox","product":"workcentre_5900i_firmware"},{"vendor":"xerox","product":"workcentre_6655_firmware"},{"vendor":"xerox","product":"workcentre_6655i_firmware"},{"vendor":"xerox","product":"workcentre_7220_firmware"},{"vendor":"xerox","product":"workcentre_7220i_firmware"},{"vendor":"xerox","product":"workcentre_7225_firmware"},{"vendor":"xerox","product":"workcentre_7225i_firmware"},{"vendor":"xerox","product":"workcentre_7830_firmware"},{"vendor":"xerox","product":"workcentre_7830i_firmware"},{"vendor":"xerox","product":"workcentre_7835_firmware"},{"vendor":"xerox","product":"workcentre_7835i_firmware"},{"vendor":"xerox","product":"workcentre_7845_firmware"},{"vendor":"xerox","product":"workcentre_7845i_firmware"},{"vendor":"xerox","product":"workcentre_7855_firmware"},{"vendor":"xerox","product":"workcentre_7855i_firmware"},{"vendor":"xerox","product":"workcentre_7970_firmware"},{"vendor":"xerox","product":"workcentre_7970i_firmware"},{"vendor":"xerox","product":"workcentre_ec7836_firmware"},{"vendor":"xerox","product":"workcentre_ec7856_firmware"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20768"},{"url":"https://github.com/advisories/GHSA-phqx-688p-m9x2"}],"sources":{"cve":[{"id":"CVE-2018-20768","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T03:03:48.7Z","updated_at":"2026-11-02T14:34:59.872731Z"}],"euvd":[{"id":"EUVD-2018-13311","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T03:03:48Z","updated_at":"2026-11-03T00:28:34.673232Z"}],"ghsa":[{"id":"GHSA-phqx-688p-m9x2","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.","status":"published","published":"2022-05-14T01:34:20Z","modified":"2023-02-02T05:04:18Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:51:50.069193Z"}],"nvd":[{"id":"CVE-2018-20768","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.","status":"published","published":"2019-02-10T17:29:00.293Z","modified":"2026-06-17T01:53:25.903Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:04:53.728218Z"}]}}