James P waffl3ss

## CVE-2022-45897
Affected Product/Version - Xerox WorkCentre 3550 - Version 25.003.03.000
Problem - Cleartext Credential Extraction
Description - An authenticated attacker can view the SMB Server settings and obtain the stored cleartext credentials associated with the specific SMB Server setting.

Product is EoL - Patch will not be released

## Keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                waffl3ss
                / Keybase.md
            
            
              Created
              December 21, 2019 23:16
            
          
    Keybase proof

I hereby claim:

I am waffl3ss on github.
I am waffless (https://keybase.io/waffless) on keybase.
I have a public key ASDRxaqT8jtbrnURRHKuSYh6e77r6ChUbtCffqkk4_2Abgo

To claim this, I am signing this object:

  
## windows_privesc
// What system are we connected to?
systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

// Get the hostname and username (if available)
hostname
echo %username%

// Get users
net users
net user [username]
	Affected Product/Version - Xerox WorkCentre 3550 - Version 25.003.03.000
	Problem - Cleartext Credential Extraction
	Description - An authenticated attacker can view the SMB Server settings and obtain the stored cleartext credentials associated with the specific SMB Server setting.

	Product is EoL - Patch will not be released
	// What system are we connected to?
	systeminfo \| findstr /B /C:"OS Name" /C:"OS Version"

	// Get the hostname and username (if available)
	hostname
	echo %username%

	// Get users
	net users
	net user [username]