Command injection

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the...

PT-2020-7990

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre versions prior to 073.xxx.086.15410 Description: The issue concerns the support/remoteUI/configrui.php script, which does not properly escape parameters. This can allow an unauthenticated attacker to execute OS commands on th...

CVE-2016-11061: Improper Neutralization of Special Elements used in an OS Command

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the...