Xerox FreeFlow Print Server: Mehrere Schwachstellen
WID-SEC-2023-2031 · updated 12.10.2026 · CVSS 9,8
What it is about
Xerox FreeFlow Print Server: Mehrere Schwachstellen
Under what conditions?
The BSI does not name any particular preconditions.
Am I affected?
The BSI does not list individual versions; the vendor notices below are what counts.
What helps?
Install the updates provided by the vendor; details in the sources below.
Is the vulnerability already being exploited?
- CVE-2023-36884: exploited in the wild according to CISA, in the catalogue since 17.07.2023, also for ransomware.
- CVE-2023-32046: exploited in the wild according to CISA, in the catalogue since 11.07.2023.
- CVE-2023-32049: exploited in the wild according to CISA, in the catalogue since 11.07.2023.
- CVE-2023-35311: exploited in the wild according to CISA, in the catalogue since 11.07.2023.
- CVE-2023-36874: exploited in the wild according to CISA, in the catalogue since 11.07.2023.
- According to a CISA advisory, used by actors from North Korea: North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs (07/2024)
Information and sources
CVE: CVE-2004-0687, CVE-2020-23903, CVE-2020-23904, CVE-2021-33621, CVE-2021-33657, CVE-2021-3575, CVE-2021-3618, CVE-2021-43618, CVE-2022-2097, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166, CVE-2022-21589, CVE-2022-21592, CVE-2022-21608, CVE-2022-21617, CVE-2022-28805, CVE-2022-30115, CVE-2022-31783 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.