VulnerabilityDeferred

CVE-2024-12510

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials.

MEDIUM 6.7EPSS 0.96%

Does this matter?

Lower severity and a low EPSS score (0.96%). Track it; it rarely justifies an emergency change on its own.

Description

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

CVSS 3.1: 6.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
EPSS: 0.96% probability · 60th percentile
CISA KEV: Not listed
Weakness: CWE-287
Source: 10b61619-3869-496c-8a1e-f291b0e71e3f

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.