What is CVE-2020-36201?

CVE-2020-36201 is a high-severity vulnerability in Xerox Workcentre 3655, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2021-01-26.

How severe is CVE-2020-36201?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Xerox Workcentre 3655

CVE-2020-36201

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.008 (53.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-36201?: CVE-2020-36201 is a high-severity vulnerability in Xerox Workcentre 3655, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 7.5/10. Published 2021-01-26.
How severe is CVE-2020-36201?: High severity. CVSS v3 base score is 7.5 out of 10.