Is CVE-2020-9330 being actively exploited?

CVE-2020-9330 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2020-9330?

CVE-2020-9330 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2020-9330

HIGH · CVSS 8.8EPSS 1.1%EU EUVD

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices (e.g., by using default credentials) can change the LDAP connection IP address to a system owned by the actor without knowledge of the LDAP bind credentials. After changing the LDAP connection IP address, subsequent authentication attempts will result in the printer sending plaintext LDAP (Active Directory) credentials to the actor. Although the credentials may belong to a non-privileged user, organizations frequently use privileged service accounts to bind to Active Directory. The attacker gains a foothold on the Active Directory domain at a minimum, and may use the credentials to take over control of the Active Directory domain. This affects 3655*, 3655i*, 58XX*, 58XXi*, 59XX*, 59XXi*, 6655**, 6655i**, 72XX*, 72XXi*, 78XX**, 78XXi**, 7970**, 7970i**, EC7836**, and EC7856** devices.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-306
EPSS score: 1.1% (64th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2020-30151)
Published: February 21, 2020
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2020-30151 in the EU Vulnerability Database. Last updated in EUVD on August 4, 2024.

View on the EU Vulnerability Database

Affected products

xerox / workcentre 3655
xerox / workcentre 3655 firmware
xerox / workcentre 3655i
xerox / workcentre 3655i firmware
xerox / workcentre 5845
xerox / workcentre 5845 firmware
xerox / workcentre 5855
xerox / workcentre 5855 firmware
xerox / workcentre 5945
xerox / workcentre 5945 firmware
xerox / workcentre 5955
xerox / workcentre 5955 firmware
xerox / workcentre 6655
xerox / workcentre 6655 firmware
xerox / workcentre 6655i
xerox / workcentre 6655i firmware
xerox / workcentre 7220
xerox / workcentre 7220 firmware
xerox / workcentre 7225
xerox / workcentre 7225 firmware
xerox / workcentre 7830
xerox / workcentre 7830 firmware
xerox / workcentre 7835
xerox / workcentre 7835 firmware
xerox / workcentre 7845
xerox / workcentre 7845 firmware
xerox / workcentre 7855
xerox / workcentre 7855 firmware
xerox / workcentre 7970
xerox / workcentre 7970 firmware
xerox / workcentre 7970i
xerox / workcentre 7970i firmware
xerox / workcentre ec7836
xerox / workcentre ec7836 firmware
xerox / workcentre ec7856
xerox / workcentre ec7856 firmware

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Xerox WorkCentre 7970 - Xerox Corporation - Common Criteria 383-4-317 - archived

References

https://securitydocs.business.xerox.com/wp-content/uploads/2020/02/cert_Security_Mini_Bulletin_XRX20D_for_ConnectKey.pdf(Patch, Vendor Advisory)
https://www.securicon.com/hackers-can-gain-active-directory-privileges-through-new-vulnerability-in-xerox-printers/(Exploit, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain