CVE-2009-1656

The CVE-2009-1656 entry pertains to Xerox WorkCentre/WorkCentre Pro devices: models 232, 238, 245, 255, 265, 275 and 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675. Documented issue: a remote command-injection vulnerability in the device web server that allows arbitrary commands to be...

CVE-2006-6472

The CVE-2006-6472 entry relates to the httpd.conf configuration in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000, where port 443 is configured to be always active. This describes a configuration issue with unknown impact and rem...

CVE-2006-6473

CVE-2006-6473 involves Xerox WorkCentre and WorkCentre Pro products. The connected documents indicate multiple unspecified vulnerabilities in these devices prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000, with unknown impact and attack vectors. The issues are ...

CVE-2005-1179

CVE-2005-1179 concerns Xerox MicroServer Web Server in various WorkCentre models (e.g., M35/M45/M55 with 2.028.11.000–2.97.20.032 and 4.84.16.000–4.97.20.032; Pro 35/45/55 and Pro 65/75/90 ranges listed in the description) where an SNMP authentication issue could allow remote modification of syst...

CVE-2006-6470

The CVE-2006-6470 issue affects Xerox WorkCentre and WorkCentre Pro SNMP Agent implementations. Specifically, older firmware before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 may return no error for a non-writable SNMP object. The initial descriptions indicate the imp...

CVE-2006-6468

Xerox WorkCentre and WorkCentre Pro products (before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000) do not verify the Fully Qualified Domain Name (FQDN) during a "Validate Repository SSL Certificate" scan. The description notes the impact and attack vectors are unknown. ...

CVE-2006-6471

Xerox WorkCentre and WorkCentre Pro betroffen: Versionen vor 12.050.03.000, 13.x vor 13.050.03.000 und 14.x vor 14.050.03.000 verwenden schwache Berechtigungen für bestimmte Dateien, was unkontrollierten Zugriff auf diese Dateien ermöglicht. Die Schwachstelle ergibt sich aus den Dateiberechtigung...

CVE-2006-6431

CVE-2006-6431 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify email message signatures via unspecified vectors. The available sources do not specify the root cause, exploit vec...

CVE-2006-6432

CVE-2006-6432 concerns Xerox WorkCentre and WorkCentre Pro devices. The scan-to-mailbox feature on affected versions—12.060.17.000 or earlier, 13.x up to 13.060.17.000, and 14.x up to 14.060.17.000—allows remote attackers to download certain files via unspecified vectors. The provided sources do ...

CVE-2006-6435

The CVE affects Xerox WorkCentre/WorkCentre Pro SNMP: versions prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000 do not generate authentication failure traps, enabling remote attackers to perform brute-force login attempts to gain system access and obtain sensit...

CVE-2006-6428

CVE-2006-6428 affects Xerox WorkCentre/WorkCentre Pro (pre-12.060.17.000, 13.x before 13.060.17.000, 14.x before 14.060.17.000). The issue allows remote attackers to gain access via unspecified vectors related to browser permissions. Exploitation details are not provided in the connected document...

CVE-2006-6469

CVE-2006-6469 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is that these devices do not block the PostgreSQL port 5432/tcp, which could permit unauthorized connections to a PostgreSQL daemon. The available do...

CVE-2006-6427

The CVE-2006-6427 entry concerns Xerox WorkCentre and WorkCentre Pro web UIs affected by command-injection in the WebUI. Affected versions are before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows remote attackers to execute arbitrary commands vi...

CVE-2006-6467

CVE-2006-6467 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is improper restriction of access to SMB file resources, allowing remote attackers to gain unspecified file or directory access through the SMB Homes...

CVE-2006-6433

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 have a timestamping flaw that can let remote attackers evade detection when audits rely on timestamps. The provided sources describe the affected products and the root cause (inaccur...

CVE-2008-6436

The CVE-2008-6436 entry concerns the Web Server component of Xerox WorkCentre devices (7132, 7228, 7235, 7245). A cross-site scripting (XSS) vulnerability could allow remote attackers to inject arbitrary web script or HTML through unspecified vectors. The affected product is the Xerox WorkCentre ...

CVE-2006-6429

CVE-2006-6429 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify certain configuration settings via unspecified vectors related to the TFTP/BOOTP auto configuration option . The i...

CVE-2008-2824

CVE-2008-2824 affects Xerox WorkCentre 7655/7665/7675 via the Extensible Interface Platform (EIP) Web Services. A remote attacker can request configuration changes through an unspecified vector. The NVD entry lists a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and im...

CVE-2006-6437

CVE-2006-6437 affects Xerox WorkCentre and WorkCentre Pro before versions 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is a denial of service caused by processing a crafted PS file via ops3-dmn, leading to application crash and core dump. The provided documen...

CVE-2008-2825

CVE-2008-2825 describes a cross-site scripting (XSS) vulnerability in the embedded Web Server of Xerox WorkCentre models M123/M128/133 and WorkCentre Pro 123/128/133. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: embedded Web...