LDAP Authentication Sever Pass-back attack

published 2025-02-03 21 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-50921

cvss: 6.7; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.0%; EPSS 1.0% chance of exploitation in 30 days, percentile 61%
public exploits: 0; none known

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

Patch / fix

fixed in 17

Xerox Versalink B400 37.82.53
Xerox Versalink B405 38.82.53
Xerox Versalink C400 67.82.53
Xerox Versalink C405 68.82.53
Xerox Versalink B600/B610 32.82.53
Xerox Versalink B605/B615 33.82.53
Xerox Versalink C500/C600 61.82.53
Xerox Versalink C505/C605 62.82.53
Xerox Versalink C7000 56.75.53
Xerox Versalink C7020/C7025/C7030 57.75.53
Xerox Versalink B7025/B7030/B7035 58.75.53
Xerox Versalink B7125/B7130/B7135 59.24.53
Xerox Versalink C7120/C7125/C7130 69.24.53
Xerox Versalink C8000/C9000 70.75.53
Xerox Versalink C8000W 72.75.53
Xerox Phaser 6510 64.75.53
Xerox WorkCentre 6515 65.75.53

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 20 mo ago (2025-02-12)

Exploit prediction

0.97% chance of exploitation in the next 30 days, higher than 61% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Affected products

Xerox Versalink B400
Xerox Versalink B405
Xerox Versalink C400
Xerox Versalink C405
Xerox Versalink B600/B610
Xerox Versalink B605/B615
Xerox Versalink C500/C600
Xerox Versalink C505/C605
Xerox Versalink C7000
Xerox Versalink C7020/C7025/C7030
Xerox Versalink B7025/B7030/B7035
Xerox Versalink B7125/B7130/B7135
Xerox Versalink C7120/C7125/C7130
Xerox Versalink C8000/C9000
Xerox Versalink C8000W
Xerox Phaser 6510
Xerox WorkCentre 6515

Classification

Weakness

CWE-287 Improper Authentication

References

securitydocs.business.xerox.com /wp-content/uploads/2025/02/Xerox-Security-Bulletin-XRX25-003-for-Xerox%C2%AE-for-VersaLinkPhaser-and-WorkCent

Sources

CVE List CVE-2024-12510
NVD CVE-2024-12510

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary