334 matches found
CVE-2006-6441
CVE-2006-6441 affects Xerox WorkCentre/WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue allows local users to bypass security controls and boot into Alchemy via certain alternate boot media, demonstrated by a USB thumb drive. The connected s...
CVE-2006-6432
CVE-2006-6432 concerns Xerox WorkCentre and WorkCentre Pro devices. The scan-to-mailbox feature on affected versions—12.060.17.000 or earlier, 13.x up to 13.060.17.000, and 14.x up to 14.060.17.000—allows remote attackers to download certain files via unspecified vectors. The provided sources do ...
CVE-2006-6438
CVE-2006-6438 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. After an Immediate Image Overwrite (IIO), the system leaves sensitive user data in http.log, which local users can read to obtain the data. Public sources in t...
CVE-2006-6433
Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 have a timestamping flaw that can let remote attackers evade detection when audits rely on timestamps. The provided sources describe the affected products and the root cause (inaccur...
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain potentially sensitive information via unspecified vectors...
CVE-2006-6427
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in 1 the TCP/IP hostname, 2 Scan-to-mailbox fold...
CVE-2006-6427
The CVE-2006-6427 entry concerns Xerox WorkCentre and WorkCentre Pro web UIs affected by command-injection in the WebUI. Affected versions are before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows remote attackers to execute arbitrary commands vi...
CVE-2006-6436
CVE-2006-6436 affects Xerox WorkCentre and WorkCentre Pro network controllers. The vulnerability enables cross-site scripting via HTTP TRACE messages in affected firmware: 12.050.03.000 and earlier, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. Impact is remote injection of arbitrary ...
CVE-2006-6436
Cross-site scripting XSS vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages...
CVE-2006-6434
The vulnerability CVE-2006-6434 affects Xerox WorkCentre and WorkCentre Pro knockoffs prior to specific version thresholds (12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000). It allows remote attackers to bypass authentication controls via unknown vectors. The underlying ro...
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors...
CVE-2006-6435
The CVE affects Xerox WorkCentre/WorkCentre Pro SNMP: versions prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000 do not generate authentication failure traps, enabling remote attackers to perform brute-force login attempts to gain system access and obtain sensit...
CVE-2006-6432
Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors...
CVE-2006-6439
Affected products: Xerox WorkCentre and WorkCentre Pro devices running before 12.050.03.000, before 13.050.03.000 (13.x), and before 14.050.03.000 (14.x). Vulnerability: CVE-2006-6439 allows remote attackers to download the audit log and obtain potentially sensitive information via unspecified ve...
CVE-2006-6430
CVE-2006-6430 affects Xerox WorkCentre/WorkCentre Pro before versions 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000; these web services do not require HTTPS, allowing remote attackers to sniff unencrypted HTTP traffic and obtain sensitive information. Remediation is to u...
Xerox WorkCentre及WorkCentre Pro多个安全漏洞
Xerox WorkCentre是一款数码打印复印一体机。 Xerox WorkCentre的ESS/Network Controller和MicroServer Web Server代码中存在多个安全漏洞，具体如下： Web用户接口上的TCP/IP用户名存在命令注入漏洞； Web用户接口上的Scan-to-mailbox文件夹名称字段存在命令注入漏洞； Web用户接口上的Microsoft Networking配置参数存在命令注入漏洞； 浏览器权限可能允许非授权访问； TFTP/BOOTP自动配置选项可能允许非授权的配置设置； 可使用HTTP而不是HTTPS发布Web服务请求；...
Xerox WorkCentre Multiple Vulnerabilities
Binary data 3834.prm...
Xerox WorkCentre Version Detection
Binary data 3833.prm...
Xerox WorkCentre Multiple Vulnerabilities (XRX06-006)
According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly suffers from multiple issues such as command injection and information disclosure vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid23751;...