{"id":"CVE-2020-36201","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-36201","generatedAt":"2026-10-27T23:27:09.730Z","title":"An issue was discovered in certain Xerox WorkCentre products.","description":"An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices.","published":"2021-01-26T18:15:55.000Z","lastModified":"2026-06-17T03:15:00.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-327"],"affected":["xerox/workcentre 3655 firmware","xerox/workcentre 3655i firmware","xerox/workcentre 5865 firmware","xerox/workcentre 5875 firmware","xerox/workcentre 5890 firmware","xerox/workcentre 5865i firmware","xerox/workcentre 5875i firmware","xerox/workcentre 5945 firmware","xerox/workcentre 5955 firmware","xerox/workcentre 5945i firmware","xerox/workcentre 5955i firmware","xerox/workcentre 6655 firmware","xerox/workcentre 6655i firmware","xerox/workcentre 7220 firmware","xerox/workcentre 7225 firmware","xerox/workcentre 7220i firmware","xerox/workcentre 7225i firmware","xerox/workcentre 7830i firmware","xerox/workcentre 7835i firmware","xerox/workcentre 7845i firmware","xerox/workcentre 7855i firmware","xerox/workcentre 7830 firmware","xerox/workcentre 7835 firmware","xerox/workcentre 7845 firmware","xerox/workcentre 7855 firmware","xerox/workcentre 7970 firmware","xerox/workcentre 7970i firmware","xerox/workcentre ec7836 firmware","xerox/workcentre ec7856 firmware","xerox/workcentre 5890i firmware"],"epss":{"score":0.00815,"percentile":0.56798,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.81%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-36201","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}