Xerox 4112/4127 C/P Security Information
Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.
Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.
As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.
Restricted Information Assurance Disclosure Documents
The Information Assurance Disclosure Document created for this product requires a Non-Disclosure Agreement. Follow this link to find your sales representative.
> Blank Non-Disclosure Agreement
4112-4127 Free Flow Print Server Optiplex Statement of Volatility (PDF 8.6M)
March 25, 2011
Common Criteria Certification of the Xerox 4112/4127 Copier/Printer
January 18, 2011
JISEC Validated Product Listing
Certification Report (PDF, 125KB)
Xerox 4112 Copier/Printer Security Function Supplementary Guide (PDF 168.2K)
September 29, 2010
Xerox 4112-4127 Copier-Printer Statement Of Volatility (PDF 211.5K)
June 17, 2009