ID |
CVE-2006-6435
|
Summary |
The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 does not generate authentication failure traps, which allows remote attackers to more easily gain system access and obtain sensitive information via a brute force attack. |
References |
|
Vulnerable Configurations |
-
cpe:2.3:h:xerox:workcentre:12.060.17.000:*:*:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:12.060.17.000:*:*:*:*:*:*:*
-
cpe:2.3:h:xerox:workcentre:12.060.17.000:*:pro:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:12.060.17.000:*:pro:*:*:*:*:*
-
cpe:2.3:h:xerox:workcentre:13.060.17.000:*:*:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:13.060.17.000:*:*:*:*:*:*:*
-
cpe:2.3:h:xerox:workcentre:13.060.17.000:*:pro:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:13.060.17.000:*:pro:*:*:*:*:*
-
cpe:2.3:h:xerox:workcentre:14.060.17.000:*:*:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:14.060.17.000:*:*:*:*:*:*:*
-
cpe:2.3:h:xerox:workcentre:14.060.17.000:*:pro:*:*:*:*:*
cpe:2.3:h:xerox:workcentre:14.060.17.000:*:pro:*:*:*:*:*
|
CVSS |
Base: | 7.5 (as of 10-09-2008 - 20:39) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
PARTIAL |
PARTIAL |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
refmap
via4
|
|
Last major update |
10-09-2008 - 20:39 |
Published |
10-12-2006 - 11:28 |
Last modified |
10-09-2008 - 20:39 |