← back
CVE-2024-12511

SMB/FTP Address Book Scan Pass-back attack

CVSS 7.6 HIGHEPSS 0.6%CWE-306CWE-522
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.6EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected products
Xerox · Phaser 6510Xerox · Versalink B400Xerox · Versalink B405Xerox · Versalink B600/B610Xerox · Versalink B605/B615Xerox · Versalink B7025/B7030/B7035Xerox · Versalink B7125/B7130/B7135Xerox · Versalink C400Xerox · Versalink C405Xerox · Versalink C500/C600Xerox · Versalink C505/C605Xerox · Versalink C7000Xerox · Versalink C7020/C7025/C7030Xerox · Versalink C7120/C7125/C7130Xerox · Versalink C8000/C9000Xerox · Versalink C8000WXerox · WorkCentre 6515

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf