What is CVE-2020-36201?

CVE-2020-36201 is a high-severity vulnerability in Xerox Workcentre 3655, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2021-01-26.

How severe is CVE-2020-36201?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Xerox Workcentre 3655

CVE-2020-36201

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Vulnerability class: POODLE (CVE-2014-3566)

Published 2021-01-26 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.008 (55.0th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 55.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_B… (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2020-36201?: CVE-2020-36201 is a high-severity vulnerability in Xerox Workcentre 3655, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2021-01-26.
How severe is CVE-2020-36201?: High severity. CVSS v3 base score is 7.5 out of 10.