CVE-2024-12511

SMB/FTP Address Book Scan Pass-back attack

HIGH

7.6

CVSS Score

Published: February 3, 2025 at 07:23 PM UTC

Updated: June 17, 2026 at 06:59 AM UTC

30 products affected across 1 vendorVersaLink B7030VersaLink C7000Xerox VersaLink C7025

Using Versalink B400 by Xerox?

Get instant alerts when new vulnerabilities affect Versalink B400 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.6

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Phaser 6510 · Xerox

60%

v < 64.75.53

Affected range stops below 64.75.53, so it looks safe — our inference, not a vendor statement

VersaLink B400 · Xerox

60%

v < 37.82.53

Affected range stops below 37.82.53, so it looks safe — our inference, not a vendor statement

Xerox VersaLink B405 · Xerox

60%

v < 38.82.53

Affected range stops below 38.82.53, so it looks safe — our inference, not a vendor statement

VersaLink B600 · Xerox

60%

v < 32.82.53

Affected range stops below 32.82.53, so it looks safe — our inference, not a vendor statement

Xerox VersaLink B605 · Xerox

60%

v < 33.82.53

Affected range stops below 33.82.53, so it looks safe — our inference, not a vendor statement

VersaLink B610 · Xerox

60%

v < 32.82.53

Affected range stops below 32.82.53, so it looks safe — our inference, not a vendor statement

Xerox VersaLink B615 · Xerox

60%

v < 33.82.53

Affected range stops below 33.82.53, so it looks safe — our inference, not a vendor statement

VersaLink B7025 · Xerox

60%

v < 58.75.53

Affected range stops below 58.75.53, so it looks safe — our inference, not a vendor statement

VersaLink B7030 · Xerox

60%

v < 58.75.53

Affected range stops below 58.75.53, so it looks safe — our inference, not a vendor statement

VersaLink B7035 · Xerox

60%

v < 58.75.53

Affected range stops below 58.75.53, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: 10b61619-3869-496c-8a1e-f291b0e71e3f

https://securitydocs.business.xerox.com/wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCentre.pdf

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.6HIGHXerox

Attack Vector: NETWORK
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: LOW
Availability: LOW

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-269CWE-306CWE-522

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card