Threat Outbreak Alert: Fake Scanned Document Notification Email Messages on April 2, 2014

Medium Alert ID: 33620 First Published: 2014 April 2 15:30 GMT Last Updated: 2014 April 4 14:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts...

Xerox WorkCentre Unspecified Remote Protocol Authorization Bypass (XRX13-008)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by an unspecified, remote protocol authorization bypass vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70659; scriptversion"1.6";...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on October 15, 2013

Medium Alert ID: 31289 First Published: 2013 October 16 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the recipient. The text in the email message...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX13-006)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple, unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70369; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on November 26, 2013

Medium Alert ID: 28724 First Published: 2013 March 26 13:15 GMT Last Updated: 2013 November 27 15:41 GMT Version: 38 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document sent from a Xerox WorkCentre Pro device for the...

Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on May 6, 2015

Medium Alert ID: 25325 First Published: 2012 March 6 18:23 GMT Last Updated: 2015 May 6 12:23 GMT Version: 75 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email...

Xerox WorkCentre User Enumeration (SNMP)

This module will do user enumeration based on the Xerox WorkCentre present on the network. SNMP is used to extract the usernames. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentr...

Xerox WorkCentre Command Injection (XRX11-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly allows an unauthenticated attacker to execute arbitrary code via specially crafted HTTP requests. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51901;...

Xerox WorkCentre Multiple Unspecified Vulnerabilities (XRX10-003)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by multiple and as-yet unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47106; scriptversion"1.7"; scriptcvsdate"Date:...

Xerox WorkCentre Crafted PostScript File Handling Directory Access (XRX10-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow unauthorized access to the Network Controller directory structure using a specially crafted PostScript file. A remote attacker may be able to leverage this to gain access to sensitive...

Xerox WorkCentre Authorization Bypass Vulnerabilities (XRX10-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by two authorization bypass vulnerabilities : - The web interface reportedly includes a script named 'YoUgoTIt.php' that will calculate a checksum for a specified folder name that wil...

SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface

SEC Consult Security Advisory 20100208-0 ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed...

Xerox WorkCentre printers backdoor

Multiple administration pages are available without authentication...

Xerox WorkCentre 5665/5675/5687 Backdoor

SEC Consult Security Advisory ======================================================================= title: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface products: Xerox WorkCentre 5665/5675/5687 vulnerable version: 21.120.39.000 and possibly others fixed version:...

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

Design/Logic Flaw

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...

Authorization

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

CVE-2010-0549

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...