Phaser 3635MFP Security Information
Xerox Security Mini Bulletin XRX16AF_V1.1 (PDF 118.6K)
December 02, 2016
Contains fix for CVE 2016-2177, CVE-2016-2183 (Sweet32) and CVE-2015-2808 (Bar Mitzvah) on Phaser 3635MFP.
Xerox Security Mini Bulletin XRX16U_V1.0 (PDF 186.9K)
August 30, 2016
General release for Phaser 3635 MFP, contains fixes for many vulnerabilities.
Xerox Security Mini Bulletin XRX15AW_V1.0 (PDF 119.4K)
November 25, 2015
This software contains fix for Logjam and VxWorks TCP Sequence vulnerabilities on Phaser 3635MFp.
Xerox Security Mini Bulletin XRX15AK_V1.0 (PDF 227.1K)
September 16, 2015
This bulletin and the software upgrade for the Phaser 3635MFP, fix the OpenSSL Poodle and Freak vulnerabilities.
Xerox Security Mini Bulletin XRX15W_V1.0 (PDF 218.9K)
June 26, 2015
Generic Xerox Multifunction Device Secure Installation and Operation Guide v1.0 (PDF 232.7K)
September 06, 2012
Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.
Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.
As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.
Phaser 3635 Information Assurance Disclosure Paper v1.08 (PDF 721.8K)
March 03, 2011
Phaser 3635 Statement Of Volatility (PDF 945.4K)
April 27, 2010