Unscored severity · published Oct 13, 2006
CVE-2006-5290
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass…
–
CVSS
3.4%
EPSS
No
On KEV
Description
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Workcentre 232 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 238 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 245 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 255 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 265 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 275 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5290
Patch
http://secunia.com/advisories/22252
securitytracker.com
http://securitytracker.com/id?1016981
Patch
http://www.securityfocus.com/bid/20334/info
www.vupen.com
http://www.vupen.com/english/advisories/2006/3921
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29357
More from Workcentre 232
–
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy…
–
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows…
–
CVE-2006-6436
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before…
–
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image…
–
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain…