Xerox WorkCentre WebUI远程命令注入漏洞

Xerox WorkCentre是一款数码打印复印一体机。 WorkCentre的TCP/IP主机名存在WebUI命令注入漏洞，允许攻击者绕过认证远程执行任意软件。如果成功利用的话，攻击者可以非授权更改系统配置。 Xerox WorkCentre Pro 275 Xerox WorkCentre Pro 265 Xerox WorkCentre Pro 255 Xerox WorkCentre Pro 245 Xerox WorkCentre Pro 238 Xerox WorkCentre Pro 232 Xerox WorkCentre 275 Xerox WorkCentre 26...

CVE-2006-5290

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."...

CVE-2006-5290

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."...

CVE-2006-5290

CVE-2006-5290 affects Xerox WorkCentre and WorkCentre Pro devices (232, 238, 245, 255, 265, 275) where the ESS/Network Controller and MicroServer Web Server components are vulnerable. The issue is a WebUI command injection on the TCP/IP hostname that allows remote attackers to bypass authenticati...

Xerox WorkCentre WebUI Arbitrary Command Execution (XRX06-005)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is reportedly prone to a code injection issue that could allow execution of arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22498;...

CVE-2006-1139

Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, causes the Immediate Image Overwrite feature to fail after a power loss, which could leave data exposed to attack...

CVE-2006-1137

Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will 1 "navigate through the...

CVE-2006-1139

The CVE-2006-1139 vulnerability affects Xerox CopyCentre and Xerox WorkCentre Pro, with affected software versions 1.001.02.073 or earlier, and 1.001.02.074 up to 1.001.02.715. The issue causes the Immediate Image Overwrite feature to fail after a power loss, potentially exposing data. The NVD en...

CVE-2006-1137

CVE-2006-1137 concerns multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro. Affected software versions include 1.001.02.073 or earlier, and 1.001.02.074 before 1.001.02.715. The flaws allow remote attackers to cause a denial of service via a crafted PostScript file t...

CVE-2006-1137

Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will 1 "navigate through the...

CVE-2006-1138

CVE-2006-1138 affects Xerox CopyCentre and Xerox WorkCentre Pro web server code versions 1.001.02.073 or earlier, and 1.001.02.074 prior to 1.001.02.715. The vulnerability allows remote attackers to cause a denial of service via memory corruption through unknown vectors. The NVD entry documents t...

CVE-2006-1136

CVE-2006-1136 affects Xerox CopyCentre and Xerox WorkCentre Pro devices where the PostScript file interpreter can overflow the stack/heap due to software versions 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715. This vulnerability may allow a remote attacker to cause a denial of serv...

Multiple Xerox CopyCentre / Xerox WorkCentre Pro security vulnerabilities

Buffer overflow and DoS on PostScript parsing, memory corruption in built-in Web server...

Xerox WorkCentre Multiple Vulnerabilities (XRX06-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly is affected by several issues, including several denial of service issues. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21027; scriptversion"1.17";...

CVE-2006-0827

Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-0828

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectiveness of security features" via unknown attack vectors...

CVE-2006-0825

Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain "unauthorized network access" via unknown attack vectors...

Server side request forgery (ssrf)

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of service via a crafted Postscript request...

Authentication flaw

Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain "unauthorized network access" via unknown attack vectors...

Cross site scripting

Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...