{"id":"CVE-2018-20769","aliases":["EUVD-2018-13312","GHSA-7487-x6v5-v552"],"status":"published","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01435,"percentile":0.73319,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2019-02-10T17:00:00Z","modified":"2026-06-17T01:53:26Z","products":[{"vendor":"xerox","product":"workcentre_3655_firmware"},{"vendor":"xerox","product":"workcentre_3655i_firmware"},{"vendor":"xerox","product":"workcentre_5845_firmware"},{"vendor":"xerox","product":"workcentre_5865_firmware"},{"vendor":"xerox","product":"workcentre_5865i_firmware"},{"vendor":"xerox","product":"workcentre_5875_firmware"},{"vendor":"xerox","product":"workcentre_5875i_firmware"},{"vendor":"xerox","product":"workcentre_5890_firmware"},{"vendor":"xerox","product":"workcentre_5890i_firmware"},{"vendor":"xerox","product":"workcentre_5900_firmware"},{"vendor":"xerox","product":"workcentre_5900i_firmware"},{"vendor":"xerox","product":"workcentre_6655_firmware"},{"vendor":"xerox","product":"workcentre_6655i_firmware"},{"vendor":"xerox","product":"workcentre_7220_firmware"},{"vendor":"xerox","product":"workcentre_7220i_firmware"},{"vendor":"xerox","product":"workcentre_7225_firmware"},{"vendor":"xerox","product":"workcentre_7225i_firmware"},{"vendor":"xerox","product":"workcentre_7830_firmware"},{"vendor":"xerox","product":"workcentre_7830i_firmware"},{"vendor":"xerox","product":"workcentre_7835_firmware"},{"vendor":"xerox","product":"workcentre_7835i_firmware"},{"vendor":"xerox","product":"workcentre_7845_firmware"},{"vendor":"xerox","product":"workcentre_7845i_firmware"},{"vendor":"xerox","product":"workcentre_7855_firmware"},{"vendor":"xerox","product":"workcentre_7855i_firmware"},{"vendor":"xerox","product":"workcentre_7970_firmware"},{"vendor":"xerox","product":"workcentre_7970i_firmware"},{"vendor":"xerox","product":"workcentre_ec7836_firmware"},{"vendor":"xerox","product":"workcentre_ec7856_firmware"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20769"},{"url":"https://github.com/advisories/GHSA-7487-x6v5-v552"}],"sources":{"cve":[{"id":"CVE-2018-20769","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T01:56:14.884Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-13312","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.","status":"published","published":"2019-02-10T17:00:00Z","modified":"2024-09-17T01:56:14Z","updated_at":"2026-11-03T00:28:45.29969Z"}],"ghsa":[{"id":"GHSA-7487-x6v5-v552","title":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.","status":"published","published":"2022-05-13T01:19:57Z","modified":"2023-02-01T05:06:06Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:50:19.146831Z"}],"nvd":[{"id":"CVE-2018-20769","description":"An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.","status":"published","published":"2019-02-10T17:29:00.357Z","modified":"2026-06-17T01:53:26.063Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:04:53.728218Z"}]}}