Unscored severity · published Dec 10, 2006
CVE-2006-6427
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute…
–
CVSS
2.9%
EPSS
No
On KEV
Description
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workcentre · Xerox
12.060.17.000; 12.060.17.000; 13.060.17.000; 13.060.17.000; 14.060.17.000; 14.060.17.000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6427
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6427
Vendor Advisory
http://secunia.com/advisories/23265
Vendor Advisory
http://securitytracker.com/id?1017337
www.securityfocus.com
http://www.securityfocus.com/bid/21365
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4791
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf
www.xerox.com
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf
More from Workcentre
–
CVE-2009-1656
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute…
–
CVE-2008-6436
Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2008-2824
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via…
–
CVE-2008-2825
Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject…
–
CVE-2006-6468
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a…