Lucene search

[email protected]CVE-2006-5290

HistoryOct 13, 2006 - 8:07 p.m.

CVE-2006-5290

2006-10-1320:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xerox

workcentre

workcentre pro

remote code execution

authentication bypass

webui

tcp/ip

cve-2006-5290

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.086 Low

EPSS

Percentile

94.4%

JSON

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via “WebUI command injection on TCP/IP hostname.”

CPENameOperatorVersion
xerox:workcentre_255xerox workcentre 255eq*
xerox:workcentre_245xerox workcentre 245eq*
xerox:workcentre_238xerox workcentre 238eq*
xerox:workcentre_232xerox workcentre 232eq*
xerox:workcentre_265xerox workcentre 265eq*
xerox:workcentre_275xerox workcentre 275eq*

CPE	Name	Operator	Version
xerox:workcentre_255	xerox workcentre 255	eq	*
xerox:workcentre_245	xerox workcentre 245	eq	*
xerox:workcentre_238	xerox workcentre 238	eq	*
xerox:workcentre_232	xerox workcentre 232	eq	*
xerox:workcentre_265	xerox workcentre 265	eq	*
xerox:workcentre_275	xerox workcentre 275	eq	*

References

secunia.com/advisories/22252

securitytracker.com/id?1016981

www.securityfocus.com/bid/20334/info

www.vupen.com/english/advisories/2006/3921

www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/29357

8.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.086 Low

EPSS

Percentile

94.4%

JSON

Related for CVE-2006-5290

nessus1 cve1