Unscored severity · published Dec 10, 2006
CVE-2006-6431
Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify signatures of e-mail messages via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workcentre · Xerox
12.060.17.000; 12.060.17.000; 13.060.17.000; 13.060.17.000; 14.060.17.000; 14.060.17.000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6431
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6431
Vendor Advisory
http://secunia.com/advisories/23265
www.vupen.com
http://www.vupen.com/english/advisories/2006/4791
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf
More from Workcentre
–
CVE-2009-1656
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute…
–
CVE-2008-6436
Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2008-2824
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via…
–
CVE-2008-2825
Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject…
–
CVE-2006-6468
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a…