Xerox FreeFlow Print Server: Mehrere Schwachstellen
WID-SEC-2022-0432 · updated 12.10.2026 · CVSS 8,8
What it is about
Xerox FreeFlow Print Server: Mehrere Schwachstellen
Under what conditions?
The BSI does not name any particular preconditions.
Am I affected?
The BSI does not list individual versions; the vendor notices below are what counts.
What helps?
Install the updates provided by the vendor; details in the sources below.
Is the vulnerability already being exploited?
- CVE-2021-4034: exploited in the wild according to CISA, in the catalogue since 27.06.2022, also for ransomware.
- CVE-2022-26486: exploited in the wild according to CISA, in the catalogue since 07.03.2022.
- CVE-2022-26485: exploited in the wild according to CISA, in the catalogue since 07.03.2022.
- CVE-2021-30858: exploited in the wild according to CISA, in the catalogue since 03.11.2021.
- According to a CISA advisory, used by actors from : 2023 Top Routinely Exploited Vulnerabilities (11/2024)
- According to a CISA advisory, used by actors from Russia: Russian Military Cyber Actors Target US and Global Critical Infrastructure (09/2024)
- According to a CISA advisory, used by actors from North Korea: North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs (07/2024)
Information and sources
CVE: CVE-2016-2124, CVE-2019-14822, CVE-2019-19906, CVE-2020-15250, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2020-9484, CVE-2021-21707, CVE-2021-22926, CVE-2021-23192, CVE-2021-27815, CVE-2021-30846, CVE-2021-30848, CVE-2021-30849, CVE-2021-30851, CVE-2021-30858 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.