CVE-2024-55928

Medium

Published: 23 January 2025

Published

23 January 2025

Modified

28 February 2026

KEV Added

—

Patch

—

CVSS Score 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score 0.0016 36.5th percentile

Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-55928 is a medium-severity Cleartext Storage of Sensitive Information (CWE-312) vulnerability in Xerox Workplace Suite. Its CVSS base score is 6.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Unsecured Credentials (T1552); ranked at the 36.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 IA-5 (Authenticator Management) and SC-28 (Protection of Information at Rest).

Threat & Defense at a Glance

What attackers do: exploitation maps to Unsecured Credentials (T1552). What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

SC-28 Protection of Information at Rest good match

prevent

Directly mandates cryptographic protection of sensitive information at rest, preventing local cleartext access to exposed secrets in Xerox Workplace Suite.

SC-8 Transmission Confidentiality and Integrity good match

prevent

Requires cryptographic protection for the confidentiality and integrity of transmitted information, mitigating remote interception of cleartext secrets.

IA-5 Authenticator Management good match

prevent

Mandates encrypted storage and transmission of sensitive authenticators, directly addressing cleartext exposure of secrets that function as credentials or keys.

MITRE ATT&CK Enterprise TechniquesAI

T1552 Unsecured Credentials Credential Access

Adversaries may search compromised systems to find and obtain insecurely stored credentials.

attack.mitre.org →

Why these techniques?

Cleartext storage of sensitive secrets directly enables discovery of unsecured credentials.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption

Deeper analysisAI

CVE-2024-55928 is a vulnerability in Xerox Workplace Suite that exposes sensitive secrets in clear text, both locally and remotely, allowing attackers to intercept or access them without encryption. Classified under CWE-312 (Cleartext Storage of Sensitive Information), it carries a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), reflecting medium severity primarily due to high confidentiality impact.

The vulnerability can be exploited by attackers with low privileges, such as authenticated users, over the network with low complexity and no user interaction required. Successful exploitation enables high-impact disclosure of sensitive secrets, potentially compromising confidentiality without affecting integrity or availability.

Mitigation details are provided in the Xerox Security Bulletin XRX25-002, available at https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf. The CVE was published on 2025-01-23T18:15:32.100.