Xerox 4595 Security Information
Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.
Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.
As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.
Restricted Information Assurance Disclosure Documents
The Information Assurance Disclosure Document created for this product requires a Non-Disclosure Agreement. Follow this link to find your sales representative.
> Blank Non-Disclosure Agreement
Xerox Security Bulletin XRX10-004 (PDF 46.6K)
October 29, 2010
A vulnerability exists in the firmware for the Xerox 4595 Copier/Printer. If exploited, this vulnerability could cause a denial of service condition that causes the device to restart. Customer and user passwords are not exposed. This firmware release can only be installed by a Xerox Customer Support Engineer; please contact the Xerox Support Center to schedule the installation.
> Download the System Software for the Xerox 4595 Copier/Printer without PostScript Installed
(zip archive 20.4M)
Xerox Security Bulletin XRX08-007 (PDF 48.7K)
June 12, 2008
A persistent cross site scripting vulnerability exists in the web server of the Xerox 4110 Copier/Printer, the Xerox 4590 Copier/Printer, and the Xerox 4595 Copier/Printer. If exploited, this vulnerability could allow code injection by malicious web users into the web pages viewed by other users.
> Download Software Update for Xerox 4110/4590/4595
(zip archive 27.4M)
> Download Install Instructions