https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:49:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-13947 EUVD-2026-13947 https://cve.radiocsirt.org/vuln/euvd-2026-13947 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23968 <p>Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included &#34;believed to affect all previous and later versions as of the date of this posting&#34; but a 2022-01-26 vendor statement reports &#34;the latest versions of firmware are not vulnerable to this issue.&#34;</p> <p>Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included &#34;believed to affect all previous and later versions as of the date of this posting&#34; but a 2022-01-26 vendor statement reports &#34;the latest versions of firmware are not vulnerable to this issue.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23968 https://cve.radiocsirt.org/vuln/ghsa-4749-xq6x-59v3 <p>Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included &#34;believed to affect all previous and later versions as of the date of this posting&#34; but a 2022-01-26 vendor statement reports &#34;the latest versions of firmware are not vulnerable to this issue.&#34;</p> <p>Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included &#34;believed to affect all previous and later versions as of the date of this posting&#34; but a 2022-01-26 vendor statement reports &#34;the latest versions of firmware are not vulnerable to this issue.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-4749-xq6x-59v3 https://cve.radiocsirt.org/vuln/gsd-2022-23968 gsd-2022-23968 https://cve.radiocsirt.org/vuln/gsd-2022-23968