CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

CVE-2010-0549

The CVE-2010-0549 entry affects Xerox WorkCentre 6400 Series (System Software 060.070.109.11407–060.070.109.29510) and Net Controller (060.079.11410–060.079.29310). A vulnerability in the Network Controller allows remote attackers to access the device’s directory structure by sending a crafted Po...

Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

Xerox WorkCentre - PJL Daemon Buffer Overflow PoC source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with the privileges of the...

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access (XRX09-003)

According to its model number and software version, the remote host is a Xerox WorkCentre device that could allow a remote attacker to obtain unauthorized access to device configuration settings, possibly exposing customer passwords. Note that successful exploitation requires that SSL is not...

Xerox WorkCentre multiple models Denial of Service

Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected] Application: Xerox WorkCentre Verifie...

Xerox Workcentre DoS

Crash on flood with LPR requests...

Xerox WorkCentre Multiple Models Denial of Service Exploit

No description provided by source. Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected]...

Xerox WorkCentre (Multiple Models) - Denial of Service

Louhi Networks Information Security Research Security Advisory Advisory: Xerox WorkCentre multiple models Denial of Service Release Date: 2009/08/25 Last Modified: 2009/08/25 Authors: Juho Ranta [email protected] Henri Lindberg, CISA [email protected] Application: Xerox WorkCentre Verifie...

Xerox WorkCentre Multiple Models Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================== Xerox WorkCentre Multiple Models Denial of Service Exploit ========================================================== Louhi Networks Information Security Research Security Advisory...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1656

The CVE-2009-1656 entry pertains to Xerox WorkCentre/WorkCentre Pro devices: models 232, 238, 245, 255, 265, 275 and 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675. Documented issue: a remote command-injection vulnerability in the device web server that allows arbitrary commands to be...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

Xerox WorkCentre Web Server Unspecified Command Injection (XRX09-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly has an as-yet unspecified command injection vulnerability in its web server. A remote attacker may be able to leverage this issue to execute arbitrary code via carefully crafted inputs...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6436

The CVE-2008-6436 entry concerns the Web Server component of Xerox WorkCentre devices (7132, 7228, 7235, 7245). A cross-site scripting (XSS) vulnerability could allow remote attackers to inject arbitrary web script or HTML through unspecified vectors. The affected product is the Xerox WorkCentre ...

CVE-2008-6436

Cross-site scripting XSS vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Xerox WorkCentre Web Server Unspecified Command Injection (XRX09-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly has an as-yet unspecified command injection vulnerability in its web server. A remote attacker may be able to leverage this issue to execute arbitrary code via carefully crafted inputs...

Xerox WorkCentre Samba Overflow (XRX08-009)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly allows a remote attacker to execute arbitrary code via specially crafted Service Message Block SMB responses due to vulnerabilities in the third-party code it uses to handle file and...

CVE-2008-2824

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors...