PT-2025-3155 · Xerox · Xerox Workplace Suite

Published 2025-01-23 · Updated 2026-02-28 · CVE-2024-55927

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9

Description A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.

Recommendations For versions prior to 5.6.701.9, update to version 5.6.701.9 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions until a patch is applied.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2025-01847

CVE-2024-55927

Affected Products

Xerox Workplace Suite

References · 12

• https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55927 · Security Note
• https://bdu.fstec.ru/vul/2025-01847 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55927 · Vendor Advisory
• https://twitter.com/WolfgangSesin/status/1882518639951184235 · Twitter Post
• https://t.me/cvenotify/108666 · Telegram Post
• https://t.me/cveNotify/153619 · Telegram Post
• https://t.me/cvenotify/108963 · Telegram Post
• https://twitter.com/CVEnew/status/1882501632199622937 · Twitter Post
• https://t.me/cvenotify/112326 · Telegram Post
• https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf · Note
• https://t.me/cvedetector/16225 · Telegram Post