CVE-2022-45897

MEDIUM

Xerox WorkCentre 3550 25.003.03.000 - Authenticated Cleartext Storage of Sensitive Information in SMB Server Settings

Title source: llm
STIX 2.1

Description

On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings.

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0039
EPSS Percentile 30.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
xerox/workcentre_3550_firmware 25.003.03.000
Published Jan 31, 2023
Tracked Since Feb 18, 2026