Login Request a demo
Critical severity · published Apr 29, 2020
CVE-2016-11061
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters…
9.8
CVSS
2%
EPSS
No
On KEV
Description
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W3
Workcentre 3655 Firmware · Xerox
before 073.060.086.15410 · source: NVD
W3
Workcentre 3655i Firmware · Xerox
before 073.060.086.15410 · source: NVD
W5
Workcentre 5865 Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5865i Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5875 Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5875i Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5890 Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5890i Firmware · Xerox
before 073.190.086.15410 · source: NVD
W5
Workcentre 5945 Firmware · Xerox
before 073.091.086.15410 · source: NVD
W5
Workcentre 5945i Firmware · Xerox
before 073.091.086.15410 · source: NVD
W5
Workcentre 5955 Firmware · Xerox
before 073.091.086.15410 · source: NVD
W5
Workcentre 5955i Firmware · Xerox
before 073.091.086.15410 · source: NVD
Affected product
W3
Workcentre 3655 Firmware
Xerox
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-11061
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-11061
Vendor Advisory
https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf
More from Workcentre 3655 Firmware
9.8
CVE-2018-20768
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
9.8
CVE-2018-20770
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
9.8
CVE-2018-20771
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
8.8
CVE-2020-9330
Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address
8.8
CVE-2018-20767
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…