漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xerox VersaLink 安全漏洞
Vulnerability Description
Xerox VersaLink是美国Xerox公司的一系列商用打印机。 Xerox VersaLink devices存在安全漏洞，该漏洞源于特定版本的固件缺少对于HTTP POST请求中的文件的验证，允许远程攻击者可利用该漏洞通过未经认证的HTTP POST请求中精心制作的TIFF文件使设备瘫痪。因为映像解析会导致重新启动，所以会导致永久拒绝服务，但是一旦引导过程结束，映像解析就会重新启动。
CVSS Information
N/A
Vulnerability Type
N/A