Contains fix for CVE 2016-2177, CVE-2016-2183 (Sweet32) and CVE-2015-2808 (Bar Mitzvah) on Phaser 3300MFP
Phaser 3300MFP
Xerox Security Mini Bulletin XRX16F_V1.0 (PDF 115.8K)
Contains fix for Logjam and VxWorks TCP vulnerabilities.
Xerox Security Mini Bulletin XRX15AF_V1.0 (PDF 198.4K)
Includes fixes for Freak and Poodle vulnerabilities.
Xerox Security Mini Bulletin XRX15D V1.0 (PDF 105K)
Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.
Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.
As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.
