Unscored severity · published Dec 10, 2006
CVE-2006-6430
Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Workcentre 232 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 238 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 245 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 255 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 265 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 275 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6430
Vendor Advisory
http://secunia.com/advisories/23265
www.securityfocus.com
http://www.securityfocus.com/bid/21365
www.vupen.com
http://www.vupen.com/english/advisories/2006/4791
www.xerox.com
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30679
More from Workcentre 232
–
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy…
–
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows…
–
CVE-2006-6436
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before…
–
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image…
–
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain…