Unscored severity · published Dec 10, 2006
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Workcentre 232 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 238 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 245 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 255 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 265 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 275 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6434
Vendor Advisory
http://secunia.com/advisories/23265
www.xerox.com
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
More from Workcentre 232
–
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy…
–
CVE-2006-6436
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before…
–
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image…
–
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain…
–
CVE-2006-6440
Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers…