ID CVE-2006-6434
Summary Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
    cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
CVSS
Base: 7.5 (as of 10-09-2008 - 20:39)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
secunia 23265
Last major update 10-09-2008 - 20:39
Published 10-12-2006 - 11:28
Last modified 10-09-2008 - 20:39
Back to Top