Detections
Analytics
Xerox Printers Missing Authentication for Critical Function (CVE-2024-12511)
high Tenable OT Security Plugin ID 505551
Synopsis
The remote OT asset is affected by a vulnerability.Description
With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials.This requires enabled scan functions and printer access.
This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
Plugin Details
Severity: High
ID: 505551
File Name: tenable_ot_xerox_CVE-2024-12511.nasl
Version: 1.1
Type: Remote
Family: Tenable.ot
Published: 7/27/2026
Updated: 7/27/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.9
Percentile: 52.46
CVSS v3
Risk Factor: High
Base Score: 7.6
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Vulnerability Information
CPE: cpe:/o:xerox:phaser_6510_firmware:64.75, cpe:/o:xerox:versalink_b400_firmware:37.82, cpe:/o:xerox:versalink_b405_firmware:38.82, cpe:/o:xerox:versalink_b600_firmware:32.82, cpe:/o:xerox:versalink_b605_firmware:33.82, cpe:/o:xerox:versalink_b610_firmware:32.82, cpe:/o:xerox:versalink_b615_firmware:33.82, cpe:/o:xerox:versalink_b7025_firmware:58.75, cpe:/o:xerox:versalink_b7030_firmware:58.75, cpe:/o:xerox:versalink_b7035_firmware:58.75, cpe:/o:xerox:versalink_b7125_firmware:59.24, cpe:/o:xerox:versalink_b7130_firmware:59.24, cpe:/o:xerox:versalink_b7135_firmware:59.24, cpe:/o:xerox:versalink_c400_firmware:67.84, cpe:/o:xerox:versalink_c405_firmware:68.82, cpe:/o:xerox:versalink_c500_firmware:61.82, cpe:/o:xerox:versalink_c505_firmware:62.82, cpe:/o:xerox:versalink_c600_firmware:61.82, cpe:/o:xerox:versalink_c605_firmware:62.82, cpe:/o:xerox:versalink_c7000_firmware:56.75, cpe:/o:xerox:versalink_c7020_firmware:57.75, cpe:/o:xerox:versalink_c7025_firmware:57.75, cpe:/o:xerox:versalink_c7030_firmware:57.75, cpe:/o:xerox:versalink_c7120_firmware:69.24, cpe:/o:xerox:versalink_c7125_firmware:69.24, cpe:/o:xerox:versalink_c7130_firmware:69.24, cpe:/o:xerox:versalink_c8000_firmware:70.75, cpe:/o:xerox:versalink_c8000w_firmware:72.75, cpe:/o:xerox:versalink_c9000_firmware:70.75, cpe:/o:xerox:workcentre_6515_firmware:65.75
Required KB Items: Tenable.ot/Xerox
Patch Publication Date: 4/21/2025
Vulnerability Publication Date: 2/3/2025
Reference Information
CVE: CVE-2024-12511