Xerox WorkCentre 6400 OpenSSL RSA Temporary Key Handling EXPORT_RSA Ciphers Downgrade MitM (XRX15AP) (FREAK)

According to its model number and software version, the remote Xerox WorkCentre 6400 device is affected by a security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, due to the support of weak EXPORTRSA cipher suites with keys less than or equal to 512 bits. A...

Xerox WorkCentre 4260 / 4265 Multiple Vulnerabilities (XRX15AV) (FREAK) (Logjam)

According to its model number and software version, the remote Xerox WorkCentre 4260 / 4265 device is affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists due to the support of weak EXPORTRSA cipher suites wit...

Xerox WorkCentre 77XX Multiple Vulnerabilities (XRX15R) (FREAK) (GHOST)

According to its model number and software version, the remote Xerox WorkCentre 77XX device is affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists due to the support of weak EXPORTRSA cipher suites with keys...

Threat Outbreak Alert RuleID14649: Email Messages Distributing Malicious Software on April 13, 2015

Medium Alert ID: 38360 First Published: 2015 April 13 13:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14649 may contain the following files: Name | Si...

Xerox Workcentre 5735 LDAP Service Redential Extractor

This module extract the printer's LDAP username and password from Xerox Workcentre 5735. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox Workcentre 5735 LDAP Service Redential Extractor',...

Xerox WorkCentre PJL Daemon Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code...

Threat Outbreak Alert: Fake Scanned Document Notification Email Messages on April 2, 2014

Medium Alert ID: 33620 First Published: 2014 April 2 15:30 GMT Last Updated: 2014 April 4 14:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts...

Xerox WorkCentre Unspecified Remote Protocol Authorization Bypass (XRX13-008)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by an unspecified, remote protocol authorization bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70659; scriptversion"1.6";...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on October 15, 2013

Medium Alert ID: 31289 First Published: 2013 October 16 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the recipient. The text in the email message...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX13-006)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple, unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70369; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on November 26, 2013

Medium Alert ID: 28724 First Published: 2013 March 26 13:15 GMT Last Updated: 2013 November 27 15:41 GMT Version: 38 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the...

Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on May 6, 2015

Medium Alert ID: 25325 First Published: 2012 March 6 18:23 GMT Last Updated: 2015 May 6 12:23 GMT Version: 75 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email...

Xerox WorkCentre User Enumeration (SNMP)

This module will do user enumeration based on the Xerox WorkCentre present on the network. SNMP is used to extract the usernames. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentr...

Xerox WorkCentre Command Injection (XRX11-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly allows an unauthenticated attacker to execute arbitrary code via specially crafted HTTP requests. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51901;...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX10-003)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple and as-yet unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47106; scriptversion"1.7"; scriptcvsdate"Date:...

Xerox WorkCentre Crafted PostScript File Handling Directory Access (XRX10-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow unauthorized access to the Network Controller directory structure using a specially crafted PostScript file. A remote attacker may be able to leverage this to gain access to sensitive...

Xerox WorkCentre Authorization Bypass Vulnerabilities (XRX10-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by two authorization bypass vulnerabilities : - The web interface reportedly includes a script named 'YoUgoTIt.php' that will calculate a checksum for a specified folder name that wil...

Xerox WorkCentre printers backdoor

Multiple administration pages are available without authentication...

SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface

SEC Consult Security Advisory 20100208-0 ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...