{"id":"CVE-2020-36201","aliases":["EUVD-2020-23765","GHSA-2g83-v4w9-j66c"],"status":"published","title":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00815,"percentile":0.57332,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-326","CWE-327"],"published":"2021-01-21T20:39:08Z","modified":"2026-06-17T03:14:59Z","products":[{"vendor":"xerox","product":"workcentre_3655_firmware"},{"vendor":"xerox","product":"workcentre_3655i_firmware"},{"vendor":"xerox","product":"workcentre_5865_firmware"},{"vendor":"xerox","product":"workcentre_5865i_firmware"},{"vendor":"xerox","product":"workcentre_5875_firmware"},{"vendor":"xerox","product":"workcentre_5875i_firmware"},{"vendor":"xerox","product":"workcentre_5890_firmware"},{"vendor":"xerox","product":"workcentre_5890i_firmware"},{"vendor":"xerox","product":"workcentre_5945_firmware"},{"vendor":"xerox","product":"workcentre_5945i_firmware"},{"vendor":"xerox","product":"workcentre_5955_firmware"},{"vendor":"xerox","product":"workcentre_5955i_firmware"},{"vendor":"xerox","product":"workcentre_6655_firmware"},{"vendor":"xerox","product":"workcentre_6655i_firmware"},{"vendor":"xerox","product":"workcentre_7220_firmware"},{"vendor":"xerox","product":"workcentre_7220i_firmware"},{"vendor":"xerox","product":"workcentre_7225_firmware"},{"vendor":"xerox","product":"workcentre_7225i_firmware"},{"vendor":"xerox","product":"workcentre_7830_firmware"},{"vendor":"xerox","product":"workcentre_7830i_firmware"},{"vendor":"xerox","product":"workcentre_7835_firmware"},{"vendor":"xerox","product":"workcentre_7835i_firmware"},{"vendor":"xerox","product":"workcentre_7845_firmware"},{"vendor":"xerox","product":"workcentre_7845i_firmware"},{"vendor":"xerox","product":"workcentre_7855_firmware"},{"vendor":"xerox","product":"workcentre_7855i_firmware"},{"vendor":"xerox","product":"workcentre_7970_firmware"},{"vendor":"xerox","product":"workcentre_7970i_firmware"},{"vendor":"xerox","product":"workcentre_ec7836_firmware"},{"vendor":"xerox","product":"workcentre_ec7856_firmware"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36201"},{"url":"https://github.com/advisories/GHSA-2g83-v4w9-j66c"}],"sources":{"cve":[{"id":"CVE-2020-36201","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","status":"published","published":"2021-01-21T20:39:08Z","modified":"2024-08-04T17:23:09.507Z","updated_at":"2026-11-02T14:35:55.128961Z"}],"euvd":[{"id":"EUVD-2020-23765","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","status":"published","published":"2021-01-21T20:39:08Z","modified":"2024-08-04T17:23:09Z","updated_at":"2026-11-03T03:07:04.065361Z"}],"ghsa":[{"id":"GHSA-2g83-v4w9-j66c","title":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","status":"published","published":"2022-05-24T17:40:15Z","modified":"2023-01-29T05:05:31Z","cwes":["CWE-326"],"updated_at":"2026-11-02T14:45:48.864861Z"}],"nvd":[{"id":"CVE-2020-36201","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","status":"published","published":"2021-01-26T18:15:55.443Z","modified":"2026-06-17T03:14:59.74Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:06:30.596418Z"}]}}