Unscored severity · published May 2, 2005
CVE-2005-1179
Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032,…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to SNMP authentication, allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-0703.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workcentre · Xerox
32_color_1.2.81; 40_color_1.2.81 · source: NVD
W1
Workcentre 165 · Xerox
7.47.30.000; 7.47.33.008 · source: NVD
W1
Workcentre 175 · Xerox
7.47.30.000; 7.47.33.008 · source: NVD
W2
Workcentre 2128 · Xerox
0.001.04.044 · source: NVD
W2
Workcentre 2636 · Xerox
0.001.04.044 · source: NVD
W3
Workcentre 32 Color · Xerox
01.00.060; 01.02.053.1; 01.02.058.4; 01.02.077.1 · source: NVD
W3
Workcentre 35 · Xerox
3.028.11.000; 3.97.20.032 · source: NVD
W3
Workcentre 3545 · Xerox
0.001.04.044 · source: NVD
W4
Workcentre 40 Color · Xerox
01.00.060; 01.02.053.1; 01.02.058.4; 01.02.65.1; 01.02.077.1 · source: NVD
W4
Workcentre 45 · Xerox
3.028.11.000; 3.97.20.032 · source: NVD
W5
Workcentre 55 · Xerox
3.028.11.000; 3.97.20.032 · source: NVD
W6
Workcentre 65 · Xerox
1.001.00.060; 1.001.02.084 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1179
Patch
http://secunia.com/advisories/14507
Patch
http://www.securityfocus.com/bid/13196
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20192
More from Workcentre
–
CVE-2009-1656
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute…
–
CVE-2008-6436
Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2008-2824
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via…
–
CVE-2008-2825
Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject…
–
CVE-2006-6468
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a…