PT-2006-7041 · Xerox · Xerox Workcentre

Publicado 2006-12-10 · Atualizado 2017-07-29 · CVE-2006-6432

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre versions prior to 12.060.17.000 Xerox WorkCentre versions 13.x prior to 13.060.17.000 Xerox WorkCentre versions 14.x prior to 14.060.17.000

Description The issue affects the Scan-to-mailbox feature, allowing remote attackers to download certain files. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 12.060.17.000, update to version 12.060.17.000 or later. For versions 13.x prior to 13.060.17.000, update to version 13.060.17.000 or later. For versions 14.x prior to 14.060.17.000, update to version 14.060.17.000 or later.

Correção

Identificadores relacionados

CVE-2006-6432

Produtos afetados

Xerox Workcentre

Referências · 6

• http://xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6432 · Nota de Segurança
• http://vupen.com/english/advisories/2006/4791 · Nota
• http://secunia.com/advisories/23265 · Aviso do Fabricante
• http://securityfocus.com/bid/21365 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30678 · Nota