CVE-2006-6468

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name FQDN during a "Validate Repository SSL Certificate" scan, which has unknown impact and attack vectors, possibly related to spoofed...

CVE-2006-6472

The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors...

CVE-2006-6467

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict access to SMB file resources, which allows remote attackers to gain unspecified file or directory access via vectors related to 1 visibility of the SMB "Home...

CVE-2006-6471

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for certain files, which allows unspecified file access...

The vulnerability of the web interface of Xerox WorkCentre 3025 microprogramming software allows a perpetrator to gain unauthorized access to account data.

The vulnerability of the web interface of Xerox WorkCentre 3025 microprogramming software is related to the improper processing of special symbols in input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to account information by sending a specially crafted...

The vulnerability of microprogrammed multifunctional devices (MFUs) such as Versalink, Phaser, and WorkCentre, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of microprogrammed multifunctional devices such as Versalink, Phaser, and WorkCentre is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of the implementations of SMB and FTP protocols for microprogrammed printer software from Versalink and WorkCentre allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of SMB and FTP protocol implementations of Versalink and WorkCentre software lies in the lack of access control for the address book during scanning. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of microprogrammed multifunctional devices (MFUs) such as Xerox Altalink, Versalink, and WorkCentre lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.

The vulnerability of microprogrammed multifunctional devices MFUs such as Xerox Altalink, Versalink, and WorkCentre lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2024-6333

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

CVE-2024-6333

CVE-2024-6333 affects Xerox AltaLink, VersaLink, and WorkCentre printers. The vulnerability is an authenticated remote code execution in the device’s software, caused by inadequate input handling that allows injection of specially crafted commands to the OS. The result is arbitrary code execution...

CVE-2024-6333 Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

CVE-2024-6333 Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products...

Xerox多款产品 安全漏洞

Xerox AltaLink and others are products of Xerox Corporation, U.S.A. Xerox AltaLink is a hardware device.Xerox VersaLink is a line of commercial printers.Xerox WorkCentre is a line of all-in-one printers. A security vulnerability exists in various Xerox products, which stems from the presence of a...

Xerox Workcentre 5735 LDAP Service Redential Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox Workcentre 5735 LDAP Service Redential Extractor', 'Description' = %q This module extract the printer's LDAP username and password from Xer...

Xerox WorkCentre User Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentre User Enumeration SNMP', 'Description' = %q This module will do user enumeration based on the Xerox WorkCentre present on the...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted POST request...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-9607 · Xerox · Xerox Altalink +2

Name of the Vulnerable Software and Affected Versions: Xerox Altalink, Versalink, and WorkCentre products affected versions not specified Description: The issue is related to a lack of measures to neutralize special elements used in an operating system command, allowing an attacker to execute...

Xerox Printers Multiple Vulnerabilities (XRX23-020)

Multiple Xerox printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...