Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on October 15, 2013

Medium Alert ID: 31289 First Published: 2013 October 16 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the recipient. The text in the email message...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX13-006)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple, unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70369; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on November 26, 2013

Medium Alert ID: 28724 First Published: 2013 March 26 13:15 GMT Last Updated: 2013 November 27 15:41 GMT Version: 38 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the...

Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on May 6, 2015

Medium Alert ID: 25325 First Published: 2012 March 6 18:23 GMT Last Updated: 2015 May 6 12:23 GMT Version: 75 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email...

Xerox WorkCentre User Enumeration (SNMP)

This module will do user enumeration based on the Xerox WorkCentre present on the network. SNMP is used to extract the usernames. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentr...

Xerox WorkCentre Command Injection (XRX11-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly allows an unauthenticated attacker to execute arbitrary code via specially crafted HTTP requests. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51901;...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX10-003)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple and as-yet unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47106; scriptversion"1.7"; scriptcvsdate"Date:...

Xerox WorkCentre Authorization Bypass Vulnerabilities (XRX10-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by two authorization bypass vulnerabilities : - The web interface reportedly includes a script named 'YoUgoTIt.php' that will calculate a checksum for a specified folder name that wil...

Xerox WorkCentre Crafted PostScript File Handling Directory Access (XRX10-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow unauthorized access to the Network Controller directory structure using a specially crafted PostScript file. A remote attacker may be able to leverage this to gain access to sensitive...

SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface

SEC Consult Security Advisory 20100208-0 ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed...

Xerox WorkCentre printers backdoor

Multiple administration pages are available without authentication...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

Authorization

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

Design/Logic Flaw

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

CVE-2010-0549

The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...

CVE-2010-0548

CVE-2010-0548 affects Xerox WorkCentre models 5632/5638/5645/5655/5665/5675/5687 with two remote authorization bypass vulnerabilities in the Network Controller and Web Server. Analysts should note that the provided documents describe (1) potential mailbox access bypassing Scan to Mailbox authoriz...

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...